Facebook banner ad serves an exploit
22770
Unpatched Windows machines are vulnerable to latest adware attack
576299
Flawed ActiveX controls used to upload photos on the popular social networking sites Facebook and MySpace can be used by hackers to snatch control of Windows PCs, according to security researchers.
583626
Zango and cash In Brief A worm exploiting Javascript support within Apple's embedded QuickTime player has spread across the MySpace network.â¦
156986
The flaws disclosed last week in Adobe System&#39;s Reader and Acrobat programs have been used to exploit computers since at least January via malicious banner advertisements, security analysts are reporting.Adobe issued patches&#160;last Wednesday for Reader and Acrobat, but the company did not detail the flaws.Problems with Adobe&#39;s software can potentially affect millions of PC users, since the company&#39;s software is widely used to read PDF (Portable Document Format) files. Most people regard PDFs as harmless.&quot;From our standpoint, it appears that this PDF-based attack has been quite successful, affecting many thousands of users throughout the world,&quot; wrote Hon Lau on Symantec&#39;s Security Response Weblog.Greg McManus of iDefense Labs, the security arm of VeriSign, reported one of the vulnerabilities to Adobe in October, according to a post by the SANS Institute, a computer security organization.Since hackers have been apparently using the Adobe flaws since January, it raises the question how they discovered the flaw.Lau wrote that the &quot;swiftness of the exploit appearing in the wild suggests that leaks had occurred.&quot;However, it appears that the vulnerabilities in Reader and Acrobat were disclosed in a responsible way, Lau wrote.The flaws in the programs allow a hacker to create a malicious PDF document. If opened by a victim, that document downloads a malicious Trojan that Symantec calls &quot;Zonebac.&quot;Zonebac was first detected in 2006. It shuts off a user&#39;s security software as well as downloads other bad software. The latest version also appears to taint search engine results, Lau wrote.In January, iDefense noticed that the malicious PDF document was being delivered through malicious banner advertisements. Symantec&#39;s Lau wrote that it&#39;s not immediately clear how the PDF file is delivered, but that the banner ads could be redirecting people to other harmful Web sites with the file. Also, spam messages may be carrying the bad file as an attachment.Malicious banner ads can be particularly dangerous since the ads can show up on legitimate Web sites. Online advertising companies have struggled to keep these ads off their networks. Sometimes, hackers will approach the networks with what is a legitimate ad and then substitute it for a malicious one. Many of those bad ads have exploited vulnerabilities in Adobe&#39;s Flash multimedia technology.Adobe&#39;s Reader and Acrobat are designed to regularly look for updates, but users are advised to upgrade to the patched version, 8.1.2.&#160;
575561
Ads for self-described security program Winfixer -- regarded by many as an unwanted program using questionable advertising to gain buyers -- got a swift eviction from MSN Messenger over the weekend. The problem of "scareware" on online ad networks, however, is much broader.
579800
(InfoWorld) - Microsoft said it moved quickly to remove a banner advertisement that appeared on its instant-messaging program for a software application that falsely hypes security threats on a user's computer. "We immediately investigated the reports and removed the offending ads, as this is a violation of our ad-serving policy," wrote Microsoft spokeswoman Whitney Burk, in an e-mail Tuesday. Last week, computer security analysts noticed twoÂ advertisements for WinfixerÂ -- a self-described security program that also goes by the name ErrorSafe -- on Windows Live Messenger. Security companies have labeled it as a "potentially unwanted program." They believe the program falsely alerts users to problems with their computer and encourages them to purchase the application. It falls into an informally named category of program called "scareware," whose creators try to bully users into downloading their program or face problems with their computer. Microsoft, which called Winfixer "malware," did not detail how the ads appeared. However, the Center for Democracy and Technology (CDT), a civil liberties and consumer group in Washington, D.C., has investigated how questionable ads promoting spyware and other malicious software have appeared on ad networks. The incident highlights how even a well-resourced company such as Microsoft can be vulnerable to the vagaries of complex associations of Internet advertising networks. "There are often a host of parties involved in the advertising chain, making it difficult to track the journey an advertisement takes from its original source to a user's computer," according to a CDT report released last year. It's extremely hard to police advertisements, as the organizations which supply them could suddenly substitute new ones, said Graham Cluley, senior technology consultant for Sophos, a security software company. "There remains a risk that advertisements may be vetted and approved when first placed with an advertising network only to be later 'updated' to advertise less savory products," Cluley said. "This isn't just a problem for Microsoft, it's a problem for any company which is delivering advertisements to its userbase." The U.S. Federal Trade Commission (FTC) has undertaken several actions against companies that have created special programs designed to exploit security vulnerabilities in computers, that -- like Winfixer -- purport to repair the machine. The Winfixer incident sparks concerns over end-user security and could be especially important for Microsoft. The company seeks to use advertising to subsidize the cost for free services such as Windows Live Mail, formerly Hotmail, and other Web-based services it's using to compete with online offerings from Google Inc. "For years I have been holding up MSN Messenger banner advertisements as an example of how advertisements can be safely served up to end users without putting them at risk of malware," wrote Sandi Hardmeier, a Microsoft Most Valued Professional and specialist in Internet Explorer, on her blog. "Now, everything has changed. This simply shouldn't have happened." Winfixer, which sells for around $39.95, has a shady history, experts says. It's a persistent program, constantly popping up on newly-created domains under various aliases, including ErrorSafe, WinAntiVirus and DriveCleaner, said Chris Boyd, security research manager for FaceTime Communications Inc. The changing names and versions are hard to keep up with for security analysts, let alone for ad network managers who may have no idea of the true nature of the program, Boyd said. "The suspicions are that it [Winfixer] is a quite sophisticated operation," Boyd said. At one time, Winfixer was one of several bad programs installed in a bundle by hackers on vulnerable machines, wrote Ben Edelman, a malware researcher and doctoral candidate at Harvard University, on his Web site. The hackers exploited the Windows Metafile (WMF) problem, a particularly dangerous security hole that appeared in December 2005 and prompted Microsoft to hurriedly issue an off-schedule patch. As always, users should be careful. "The responsibility ultimately falls on the users to be wary of advertisements which may be selling inappropriate or potentially damaging -- to data or finances -- goods," Cluley said. Â
740908
Danish security research firm Secunia has reported a vulnerability that occurs in most browsers that can be exploited by hackers looking to spoof the content of Web sites.
16648
Opt-out button in spam used to run exploit
694437
Serves up ads for deceptive security software Facebook has become the latest website to be found pushing services that delivers highly deceptive security warnings designed to trick users into buying software.â¦
428777
Rogue banner ad pulled Microsoft has admitted its Windows Live Messenger client displayed banner ads for several days punting an application blacklisted as a security risk.â¦
243964
Advertisements placed by Google in  Web pages are being hijacked by so-called trojan software that  replaces the intended text with ads from a different provider,  Romanian antivirus company BitDefender says.
448507
An independent researcher finds an Internet Explorer vulnerability that could turn drag-and-drop into drag-and-infect.
387344
On 20 November 2004, a major malicious-code attack emerged targeting European Web sites via banner ads. This two-step attack exploits two previously identified security vulnerabilities: the Bofra (or IFRAME
689953
A recently detected exploit code foreshadows a likely worm-style attack on Windows machines plagued with the JPEG vulnerability made public last week, security experts said Thursday.
440097
Misdirection ruse Security researchers have identified a Trojan that hijacks Google text advertisements, replacing them with "ads" from a different provider that are likely to be laced with spyware.â¦
125585
Researchers at security gateway vendor Fortinet have uncovered an adware-distribution scheme being carried out on the Facebook social networking site considered to be the first attack propagated on the wildly popular online portal.
220487
An exploit attacking the most recent Windows bug is circulating on Usenet, security experts said Tuesday, that crashes machines, yet another indicator that attackers will chase the vulnerability until they&#39;ve launched mass mailing-style worm-based attacks