Tuesday, July 7, 2009

Attackers infect websites via ad networks, widgets

According to reports on Twitter as well as on ZDNet over the weekend, visitors to several high-profile websites were blocked from accessing parts of the sites because an advertising partner, Eyewonder, suffered a malware attack.



Malicious advertisements are increasingly being used by attackers as a vector for distributing malware via legitimate sites. In this case, what happens is that the malicious code that the website ends up serving to users is being sourced in from an advertising partner. The website itself has not been compromised by attackers -- rather, the ad network used by the site has been compromised. Attackers often use malicious ads to achieve scale and avoid detection. It would have been difficult for the attackers to infect a large number of high-profile websites directly; instead, they were able to leverage the trusted relationship between the websites and their ad network to get malicious content (in this case an ad) served to the sites' end users. In some cases, Dasient has added certain ad networks to its internal blacklist to inform its customers where there is a risk that ads may result in infecting their users.

In addition to malware coming in through ads, we have also seen cases where malicious code comes into a website via content mash-ups or third-party widgets. For example, third-party widgets such as traffic counters have been used to infect websites (see section 4.4 of "The Ghost in the Browser"). We have spoken to website owners who explained that their sites were infected not through attackers exploiting a vulnerability in the website, but because they included a plug-in or widget that ended up being malicious. In some cases, the widget is benign for a period of time (even years), but then drastically changes behavior to become malicious (either because the widget provider was itself malicious or, more likely, because the widget provider's servers were hacked).

Attackers will continue to find network and web application vulnerabilities in websites that they can exploit to directly plant malicious code. However, it is clear from the Eyewonder incident that the attackers will also seek ways of exploiting the trusted relationships between websites and their third-party advertising or content partners to create the same effect. The nature of the open web encourages websites to mash up best-of-breed content (and ads) from various sources. To reduce risk, it is important for websites to perform due diligence on all third-party content and ad providers, as well as employ automated detection and remediation services.

60 comments:

  1. It had been within this replica rolex uk time period as soon as Omega generated quite a few it is almost all beloved time period portions. Retro Omega wristwatches which might be however hugely desired and are also well known to this day. Over the replica rolex daytona Minute Earth Struggle, Omega designed a compelling name intended for independently by means of coming out with armed forces in addition to pilot wristwatches intended for servicemen. Many people are regarded with regards to very good worth in addition to the good swiss replica rolex attention to aspect. Different favorite wristwatches by of which age were being this Omega Speedmaster chronograph, this Omega Seamaster watertight activities check out along with the Omega Constellation wristwatches, which might be many however very favorite. The way it is connected with Cartier Pasha fake rolex uk Imitation check out is usually fabricated on the anxiously equipped s / s. This boxing techinque on the check out is usually awesome which often would make a bare damaging while using the blued arrow-formed hands and wrists. This stainless steel animate armlet permanently combinations from the Cartier fake rolex watches Pasha imitation style and design. Cartier Pasha imitation look into is usually an accurate archetype on the aboriginal Cartier check out. Major remarkable on the Cartier imitation view is usually an aftereffect on the abstracts in addition to technological know-how acclimated on it is rolex replica creation.

    ReplyDelete
  2. UNITED STATES OF AMERICA basketball staff was a great unstoppable force through the early and also mid nineties yet things have got changed and its particular invincibility is currently gone. 12 players that will represent america team have become announced and so they have huge tasks and also expectations in advance. www.scorespro.com

    ReplyDelete
  3. Things are so nicely defined here that you don't have to say a single new thought of what you are doing,Finance assignment uk

    ReplyDelete
  4. I really like to see the things that are totally new and the best one love to see it.Buy Dissertation UK

    ReplyDelete
  5. Attackers who have slipped malicious advertisements onto major websites over the last month have potentially compromised large numbers of dissertation writers

    ReplyDelete
  6. Thanks for this really nice post here.
    blog

    ReplyDelete
  7. Thank you very much, the investigation is really worth! This investigator is an adept in the issue. In contrast to different pieces of writing I have already looked through on the item, this one renders sophisticated notions. This web site time after time procures a great number of enlightening researches on the current questions. My brouther and I scan them daily.

    http://essays.expert

    ReplyDelete
  8. Its very much true. they do attack by this means of connections.
    visit this blog
    thanks for helping us in this
    visit this blog

    ReplyDelete
  9. How to download Clash of Clans (COC) for PC Game :
    Clash of Clans Download for PC
    How to Install WhatsApp on PC easily given here :
    click here
    Downloading Xender on PC available on Windows 7, Windows 8 :
    Xender for PC Download

    ReplyDelete
  10. Zapya for Computer Free : www.zapyaforpcc.com
    WeChat on PC Download : www.wechatforpcr.com
    Downloading Xender for PC or Computer :
    www.xenderforpc.com

    ReplyDelete
  11. Psiphon APK Download : psiphon apk download
    Psiphon for PC or Computer : psiphon 3 for pc
    Moviebox for PC Download Guide from windanalytics.com
    moviebox for pc or computer

    ReplyDelete
  12. If you have not found work which can be done from Home.
    This one will definitely amaze you:
    Love from Sandra

    ReplyDelete
  13. Our team has found this awesome article
    on this blog

    ReplyDelete
  14. rumah dijual murah, harga rumah knock down kayu jati kuno mulai 20 jutaan.

    RUMAH JAWA JOGJA adalah perusahaan jual beli rumah jawa dan pemborong bangunan untuk hunian, penginapan, pendopo, rumah makan, resort, guest house, villa dan lain sebagainya. Tim ahli dan segala keperluan pembangunan yang Anda butuhkan semua ada pada kami sehingga memudahkan Anda mengontrol pembangunan hanya dengan satu pintu.


    Layanan kami meliputi :

    -Jual beli rumah limasan, rumah joglo, rumah kampung, rumah geladak, lintring, gazebo, kandang sapi / kandang kebo, gebyok dll,

    -Jasa bongkar pasang dan setting ulang segala type rumah jawa knock down,

    -Pemborong bangunan,

    - Arsitek,

    -Konsultan,

    -Desain taman,

    -Desain Interior dan Eksterior.

    -Dll.


    RUMAH JAWA JOGJA beda dengan yang lain karena kami bukan sekedar MEMBANGUN RUMAH namun kami MEMBANGUN HUNIAN yang layak, artistik, keren, aman, nyaman dan sesuai dengan kebutuhan Anda.

    Jasa yang kami tawarkan juga sangat berbeda dengan yang lainnya karena kami selalu memberikan pelayanan terbaik, tenaga kerja yang ahli dibidangnya, terlatih, profesional, loyal, jujur, berdedikasi, bertanggung jawab dan selalu mengedepankan keamanan sesuai dengan standar kontruksi di Indonesia.

    Dengan pengalaman serta kemampuan yang kami miliki dan tenaga kerja berpengalaman yang ahli dibidang arsitektur rumah jawa, membuat kami yakin bahwa kami dapat membantu mewujudkan rumah impian anda.

    Recomended links:
    rumah limasan
    rumah limasan
    rumah limasan
    rumah limasan
    rumah limasan
    rumah limasan
    rumah limasan
    rumah limasan
    rumah limasan
    rumah limasan
    rumah limasan
    rumah limasan
    rumah limasan
    rumah limasan
    rumah limasan
    rumah limasan
    rumah limasan
    rumah limasan
    crystal x asli
    minyak bulus
    jam tangan
    minyak bulus
    batik
    olx motor bekas


    ReplyDelete
  15. Thanks for sharing that post with us. I like the way you have presented facts to argue out your case. Assignment Help

    ReplyDelete
  16. I recently came across your blog and have been reading along. I thought I would leave my first comment. I don’t know what to say except that I have enjoyed reading.
    Assignment Help

    ReplyDelete
  17. This post is really awesome
    WhatsApp for PC: visit this blog
    WeChat for PC or Computer: visit this blog

    ReplyDelete
  18. Great piece of information...I really like the quality information shared through this post...keep updating such useful information.

    Regards
    clashofclansmypc.com

    ReplyDelete
  19. This comment has been removed by the author.

    ReplyDelete
  20. Thanks
    photoshop crack
    idm crack
    autocad crack
    photoshop crack
    microsoft office crack
    tally erp 9 crack
    http://photoshopcracks.blogspot.com/
    http://idmcracksdownload.blogspot.com/
    http://cracksautocad.blogspot.com/
    http://tallyerp9crackdownload.blogspot.com/
    http://crackoffice.blogspot.com/

    ReplyDelete
  21. WhatsApp for PC downloading guide available from this website

    ReplyDelete
  22. yea this is sad and it effects everything in our PC.
    WhatsApp DP

    ReplyDelete

  23. The Jews Togel Online Singapore welcome Togel Online Hongkong this revolution in the Christian world, Bandar Togel Singapore and the Bandar Togel Jews Togel Online Terpercayashould show anexample. It is not an accident that Judaism gave birth to Marxism, and it is not an accident that the Jews readily took up Marxism: all this was in perfect accord with the progress of
    TheAgen Bandarq
    Communists Agen domino99
    are againstDomino Online
    religion (Christianity),Bandarq
    and Bandarq
    theyBandarq
    seek to Bandar domino destroy religion; yet, when we look deeper into the nature of Communism, we see that it is essential nothing else than a religion (Judaism)." (A Program for the Jews and Humanity, Harry Waton, p. 138).
    I shallAgen Bandarq use such influence asAgen Domino99 I have inDomino Online emphasizing the basic truths common Agen Poker to all denominations,Bandar Domino99 in Nonton Film Bioskop lowering denominational barriers and in promoting effective cooperation among Christians of whatever creed.The goal of Agen Bandarq
    Russia is in the Agen domino
    first instance aDomino Online
    World-Revolution. agen Bandarq
    The nucleus Bandar domino99 of opposition to such plans is to be found in the capitalist powers, England and France in the first instance, with America close behind them.
    In his novel Agen Bola Resmi Coningsby Bandar bola (London, 1844),Agen Bola Terpercaya Disraeli Agen Bola Terbesar drewAgen Bola online a picture Judi bola form Berita Bola the life Berita Bola of the JewsAgen Ibcbet ruling the world frombehind the thrones as graphic as anything in the Protocols of Nilus. Many believe, and it has been proved to most, Coningsby was a plagiarism of a Byzantine novel of the XVIIth century.

    ReplyDelete
  24. Vulnerabilities in websites that they can exploit to directly plant malicious code. However, it is clear from the Eyewonder incident that the attackers will also seek ways of exploiting the trusted relationships between websites and their third-party advertising or content partners to create the same effect
    pc app store

    ReplyDelete
  25. ShareIt one of the finest App and content sharing software on android. Shareit for PC

    ReplyDelete
  26. Learn how to install Pokemon go for PC
    IF you want to download and installWhatsapp for PC Download Try this.
    Enjoy SnapChat Online for PC
    Here's how to download WhatsApp for Windows
    Download HD Wallpapers

    ReplyDelete
  27. Whatsapp for PC download is possible from this website

    ReplyDelete
  28. Super website with a great sharing and amazing stories is ur web.. please keep doing what u do now.. thanks to you.
    Agen Bola Resmi

    Bandar bola

    Agen Bola Terpercaya

    Agen Bola Terbesar

    Agen Bola online

    Judi bola

    Berita Bola

    Agen Sbobet

    Agen Ibcbet

    ReplyDelete
  29. Super website with a great sharing and amazing stories is ur web.. please keep doing what u do now.. thanks to you.
    Agen Bandarq

    Agen Domino99

    Domino Online

    Agen Poker

    Bandar Domino99

    berita politikberita politik terkini

    ReplyDelete
  30. Really unbelievable, is not as easy as you can see, the posts difficulty and challenge waiting for you and that's the main difficulties that make us interesting.,,Coursework writing services

    ReplyDelete
  31. Fantastic blog page with all the terrific good items not to mention I’m absolutely sure this will be vastly advantageous.....Phd dissertation writing service

    ReplyDelete
  32. plastic surgery gone wrong for most of the celebrities of the world and their before and after effects happen to them

    ReplyDelete
  33. thanks for sharing, good work keep it up and you may also Download clash of Clans for PC from the link attached.

    ReplyDelete
  34. IF you want to download and installWhatsapp for PC Download Try this.

    Enjoy layout for PC
    Get Android Hacking Apps

    Here's how to download Hill Climb Racing 2 For PC

    You can candy crush saga for pc Free.
    Download Widescreen Wallpapers for iOS and Android, Desktop.
    Galaxy S8 Buzz | Galaxy S8 Specs, Features, News, Price and Release Date.
    Free netflix account
    Techappspc
    Wallpapers Backgrounds, Images, Art Photos.

    ReplyDelete