• Skip to primary navigation
  • Skip to main content
  • Skip to footer
  • Home
  • Advertise With Us
  • Contact
  • Cookie Policy
    • Privacy statement (CA)
    • Cookie policy (CA)
    • Privacy statement (UK)
    • Cookie policy (UK)
    • Privacy statement (US)
    • Cookie Policy (US)
    • Privacy statement (EU)
    • Cookie policy (EU)
    • Disclaimer

TechWalls

Technology News | Gadget Reviews | Tutorials

  • Reviews
  • Tech News
  • Tech Guide
  • Gadget & Apps

How malvertising compromises ad networks

Updated on Mar 31, 2015 by Guest Authors

Malvertising has gotten a bit wiser these days in moving through a scheme that appears legitimate. And even reliable websites of popular media outlets and blogs have fallen victim to this kind of malicious activity.

How are malvertising operators able to penetrate the supposedly tight security filter of ad networks? Well, hacker Golden Goose discovered a way to push malicious ads through trusted brands using legal processes. How is this possible?

malvertising

The real-time ad bidding process is the culprit. It is now the commonly adopted method of selling online ads. And hackers have found a way to abuse it in such a way that they are still able to perform their malicious activities in a legitimate manner.

Advertisers are able to deliver targeted ads using real-time ad bidding and hackers, under favorable circumstances, hop on the bandwagon and push malvertisements to any sites with the same degree of freedom as legit advertisers have.

Malvertisers are also able to zero in on your specific location or community in much the same way that legit advertisers do by using data from geo-targeting of advertisements. This targets the ad, malicious or legit, to a specific public IP space through real-time ad bidding.

Aside from that data, malvertising can also be made to manipulate your shopping habits to deliver targeted ads to you, or use high-traffic portals that host click-bait content in order to hound you on the Internet.

Even before security vendors could fix security loopholes in place, malvertisers are always ahead in perpetrating their attack by bringing the flaw to light in order to circumvent detection tools. Malvertising has a quick mechanism to hide before ad networks could spot their activity, so it’s practically hard to stop this malicious operation at present.

In malvertising, attackers work to build botnets, spread banking malware and transmit complicated exploits for use in targeted attacks. But just how do they perform these activities without getting caught? First, they set up a sham corporate appearance to purchase ad spaces under the guise that they are legit advertisers.

These attackers, most of the time, already operate compromised websites that contain exploit codes. Victims of malvertising will then be redirected to those sites once those rogue advertisers find their target victims.

Users can avoid this form of attack by installing an ad blocker plugin in their browser, though this is the least option feasible since websites get their revenue from advertising. The most practical way to prevent malvertising is for ad exchanges to host their own content.

Disclosure: We might earn commission from qualifying purchases. The commission help keep the rest of my content free, so thank you!

Reader Interactions

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Footer

New iDPRT Printers – SP450, SP420, and Zeva 1966 Photo Printer Reviewed

Munbyn P44S Wireless Thermal Label Printer Review

Master & Dynamic MW75 Wireless Headphones Review – Get Lost in the Music

3DMakerPro Mole 3D Scanner Review – Affordable, Portable, and Easy To Use

Follow TechWalls

YoutubeFacebookTwitterInstagram

Recent Posts

  • How to Buy A Tesla EV in Connecticut
  • Growatt VITA 550 Power Station – Save Money and Stay Eco-Friendly
  • New iDPRT Printers – SP450, SP420, and Zeva 1966 Photo Printer Reviewed
  • Munbyn P44S Wireless Thermal Label Printer Review

Copyright © 2023 ยท All Rights Reserved

Manage Cookie Consent
We use technologies like cookies to store and/or access device information. We do this to improve browsing experience and to show personalized ads. Consenting to these technologies will allow us to process data such as browsing behavior or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional cookies Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
Manage options Manage services Manage vendors Read more about these purposes
View preferences
{title} {title} {title}