Malvertisements or malvertising are a malicious variety of online advertisements generally used to spread malware. However, that definition is somewhat dated as the term has evolved. While it\u2019s easy to call an ad that redirects to malware a malicious one, it is often hard to differentiate between fraudulent and legitimate online ads.<\/p>\n
For example, there are any number of legal online ads that any reasonable observer would characterize as malicious or fraudulent. On the other hand, there are likely benign ads that are flagged by some advertising networks as malicious or fraudulent on superficially technical grounds. However, there are also vast swaths of online ads that are completely and unquestionably malicious.<\/p>\n
Allow us to begin with the outright malicious advertisements:<\/em><\/strong><\/p>\n The most obvious, easily definable type of malicious advertisements are those that \u2013 when clicked on \u2013 redirect users to websites that will infect the user with malware or install some other unwanted software<\/a>, unless that person is running an antivirus product capable of blocking the infection<\/a>. Users running out-of-date operating systems and browsers are especially vulnerable to this and other forms of malware infection.<\/p>\n This unwanted or malicious software can serve any number of functions. If it\u2019s malware, it could contain a keylogger<\/a> for stealing login credentials or other sensitive data, it could pull users into a spam-spewing botnet<\/a>, it could be a banking trojan<\/a>, a rogue antivirus application<\/a>, ransomware<\/a> like CryptoLocker, or virtually any other type of malware that\u2019s been written about here or elsewhere.<\/p>\n A recent example is the ad network AppNexus, who was accused of posting malvertisements on the websites of TMZ, Java.com and others.\u201dThese websites have not been compromised themselves, but are the victim of malvertising,\u201d the security firm Fox-IT told Threatpost<\/a>. \u201cThis means an advertisement provider, providing its services to a small part of a website, serves malicious advertisement aimed at infecting visitors with malware.\u201d This type of malvertisement is easy to spot and universally accepted as illegal.<\/p>\n Now let\u2019s transition into the grey area:<\/em><\/strong><\/p>\n As many have pointed out, malvertisements don\u2019t necessarily have to contain what is universally considered malware. They could install tracking cookies without proper permission to do so, they could install a legitimate piece of software without your consent, they might clandestinely collect user information or exceed their stated scope in some other way.<\/p>\n These sorts of malicious or fraudulent online advertisements are certainly frowned upon. In many cases, an advertising network could suspend these types of ads or require that they be changed in order to comply with the appropriate guidelines. Some ad networks have shady guidelines and will let nearly any type of advertising fly. Similarly, some ad networks probably do a better job of policing their content and clients than others. In a lot of cases, offending networks will be called out by researchers and ultimately the media. Sometimes the pressure catalyzes change; sometimes the pressure accomplishes nothing. You can opt-out of specific ad networks<\/a>, but doing so is convoluted and perhaps antiquated and who knows if anyone actually pays attention to these lists.<\/p>\n Then there are the legit ads that seem clearly fraudulent:<\/em><\/strong><\/p>\n This is definitely the hardest category, but nearly everyone will be familiar with what I am referencing. These promote pills and tricks that can\u2019t possibly be real and advertise for jobs where you can make tens of thousands of dollars per month working from home. Some claim \u201cyou\u2019ll never believe what [some person] did!\u201d Others make hyperbolic references to your past being exposed online or new rules near where you live that will affect you in some way.<\/p>\n Some of these kinds of ads leads to well-meaning businesses, for sure. At the same time, a lot of these ads straddle the line between fraud and legitimacy. In the end, someone decides these are appropriate.<\/p>\n A story I wrote at the beginning of 2012 is a great, though admittedly outdated, example of this: one security company classified CounterClank<\/a> as a strain of Android malware while another characterized it as an aggressive advertising network. In the end, it doesn\u2019t really matter who was right, because with many online ads, maliciousness is a matter of perspective.<\/p>\n How do you protect yourself?<\/em><\/strong><\/p>\n Don\u2019t click on shifty looking ads, even if they boast pictures of attractive people, issue seemingly relevant warnings or offer fast money and magic pills. My personal recommendation is that you only ever click on ads for things that you would actually want to buy. If someone is offering yousomething with an advertisement, then think twice, because advertisements generally attempt to get you to buy something.<\/p>\n