Fox, Google and Yahoo! Ad Networks Distribute Malware

The most common channels for delivering the malicious payload are ads hosted by Fox and Yahoo!, which accounted for over 50-percent of the infectious ads detected by Avast's network of users. Google's DoubleClick network was also amongst those compromised, though it was not in the top eight sources for the attack. (You can see a chart of the number of malicious ads served up above.)
Avast took the opportunity to urge advertising networks to be more diligent in inspecting the content they distribute to partner sites. Ads are already a source of annoyance for some, but having your credit card information stolen simply because you performed a Google search is unacceptable. Users should update their anti-malware tools, and make sure their firewalls are turned on. Alternatively, browser add-ons like Adblock Plus and NoScript should protect against the vulnerability as well. [From: Avast and CNET, Via: BoingBoing]





Disney World Scammers Scored Four Years of Free Vacations
Stranger's Kiss Keeps 16-Year-Old From Committing Suicide
Rookie Cop Reportedly Berated, Called 'A Rat' For Arresting Off-Duty Officer
Walmart Ending Membership in Conservative Group
How I Went Bankrupt at 23
Can a New Guy Save Best Buy?
Woman Claims Kangaroo Stalked Her for 2 Days, Then Attacked
Pete Cosey Dead: Chicago Guitar Great and Miles Davis Collaborator Dies at 68
Facebook, Week Two: Fortunes Made and Fortunes Lost (Mostly Lost)
A Journey To The Hottest Place On Earth: Dallol Ethiopia














Comments
1
Subscribe to commentsOnur KomiliMar 30th 2010 5:09PM
Just because you viewed one of these ads doesn't mean you've been infected. When you view the ad the first thing to happen is a check is made to see if you're vulnerable to a number of attacks that the malware authors are trying to exploit, this is usually done by some javascript code checking your browser type, OS and version. As an alternative they can also direct you to some Fake Antivirus page where they try to trick you into downloading and purchasing their software to remove a virus that was never actually there.
They mentioned updating your security tools and running something like NoScript, but you should also keep your browser and plugins/addons up to date. If you're running an older browser like Internet Explorer 6, consider upgrading to a newer version or even a different browser like Firefox.
Onur Komili - Web Security Researcher
SophosLabs -- http://www.sophos.com/blogs/sophoslabs/