Pop-up ads have long been the scourge of the internet. But the rise of ad blockers, plus anti-pop-up moves by Google and Firefox had given us hope that those days would soon be behind us.
So why are even the most tech-savvy among us starting to see ads appear congratulating us for being "selected as a winner" of a $1,000 Amazon gift card?
If you've found yourself staring at one of these ads on your phone and you have no idea how it happened, it's because of a "forced redirect" on the webpage, caused by a malware-like script running in one of the ads on the page. Needless to say, the gift card offer is almost guaranteed to be a scam.Credit: The pop-ups in question appear on both smartphone and desktops, promising a prize in exchange for your personal information or a few clicks. They are is undeniably annoying, and quite clearly a scam.
Neither Android nor iPhone users are safe, and some frustrated web denizens are at their wits' end.
Tweet may have been deleted
What's happening
The reason some of these pop-up ads may be getting around your ad blockers: they aren't normal ads.
Cybersecurity firm Symantec has identified one specific strain of malware hiding in apps, Android.Fakeyouwon, that its researchers say is fueling these types of scams on Android devices.
Infected applications "hide themselves as legitimate apps in domains such as settings apps (Panel Settings), or apps that play music for free," the researchers wrote.
"Apps will also ask for the minimum amount of permissions, so as not to concern more discerning users on installation."
What's more, it's likely not just malware in malicious apps ruining your day. Something called forced redirects could also be at play.
Tweet may have been deleted
"A forced redirect is when a person is surfing the web on a computer or mobile device and through no action of their own gets redirected to a different website," according to the anti-malware company Confiant.
"Usually the website they are redirected to is a vehicle for some form of affiliate fraud or malware."
Ed Ho, Twitter's General Manager of the Consumer Product and Engineering Group, tweeted a series of questions about this very practice.
"What is interesting to me: 1) What ad network is this running through, and why don't they know?" Ho told us. "2) Why is it that Safari on iOS appears to be vulnerable to this attack? 3) What is the actual vulnerability?"
Confiant identified one such network of so-called "malvertising" in January of this year, and found that it involved the creation of "28 fake ad agencies to distribute malvertising campaigns."
In short, this is a sophisticated fraud network that is mucking up your browsing.
There's hope
Thankfully, all is not lost. Google planned to release a version of Chrome that stops forced redirects in January, but according to USA Todayas of February that feature had been pushed to a mid-April release.
Still, that means it is very much on the company's radar, and a Firefox browser extension currently does this very thing.
Once blocking forced redirects becomes the norm across browsers, both mobile and desktop, these "Congratulations" ads should decline. However, some of the responsibility falls on you, too.
After all, a browser update isn't necessarily going to prevent malware-riddled apps from screwing with your browsing. You can, and should, periodically go through your phone and delete old, little-used, or just plain sketchy-looking apps.
As you do, take comfort in the fact that you very well could be making your browsing experience better — one deletion at a time.
Featured Video For You
Here's 5 tips for Spring cleaning your digital footprint
TopicsAmazonCybersecurity
相关文章
精彩导读
热门资讯
关注我们
