Gone are the days of getting malware by going to sites you shouldn’t be and clicking sketchy links. Getting infected with malware today is as simple as visiting perfectly legitimate websites. The delivery platform for the malware is rogue advertisements. The people behind writing these viruses have started purchases ads from the ad services that websites use to make money. Over the last year there have been reports of people getting viruses from well known websites such as the New York Times and today I witnessed two different systems getting infected due to users visiting the White Pages website. All it takes is loading the page and the user gets infected with a fake anti-malware software. One of these computers had a completely up to date reputable antivirus package and was also sitting behind a Unified Threat Management box that was also scanning for malicious sites and traffic. The writers of these malicious programs are writing them so quickly, people get infected before there are definitions to guard against them.
In both instances the users were using Internet Explorer, but I don’t simply want to point the blame at the browser. Of course the user may potentially be safer by using a browser such as Firefox or Chrome, however that isn’t always feasible especially in the business world when business related websites require Internet Explorer for one reason or another. The user can’t be hassled to use one browser for most sites and another browser for some sites. I can also badmouth the people who write the malware as much as I want, but are they going to stop what they are doing, of course not. Instead I believe the actual ad services need to be held responsible for the ads that are being hosted through their service. They need to screen the ads being submitted and implement safeguards against serving anything that could be malicious.
Users and websites both need to hold the services accountable. Users need to report any kind of malicious advertisements to the website that they were viewed on. From there the websites need to report them to the ad agency. If there continues to be issues with rogue ads, then the website needs to find a better ad service, regardless of how well their current one is paying them. If services don’t get held accountable in the near future, more and more users will be using ad blocking software. Ad blocking software is bad for everyone involved as both ad agencies and websites will be missing out on revenue that is vital to their survival.







