Whether this is true or not, the sheer fact that it’s *possible* has a big take-home message: you *cannot* outsource your advertising, especially not to a firm that outsources what they provide to you. It may be cheaper in the short run to simply trust what the next company down the line is providing to you, and then pass that on to your client, but just wait until the lawsuits start flying.

This may make things more difficult for small websites, but hopefully the concept of “buck stops here” advertising services will emerge, where an advertising service promises to personally inspect and approve every ad they serve.

Hi Barry,

You make a good point, and I have the said thing myself many times, but as was demonstrated by the Sensis incident, also reported on this blog, sometimes you can be caught out even if you host the advertisements on your own server.

Such is the nature of the beast; the malicous advertisements are coded in such a way as to try and avoid detection by the victim web sites and their advertising networks.

It is not sufficient to simply run the ad to see if it does anything; nowadays the creatives must be decompiled and the code checked for suspicious content – a skill that the advertising networks and web site staff may lack.

Best wishes,

Sandi &c.

I just signed into hotmail and this happened to me (a MalwareAlarm redirect), much to my surprise. I run a clean, fully patched computer as far as I know, and I’m fairly certain that I don’t have any malicious software on my machine that assisted in this redirect.

The page it directed me to was quite sophisticated. After cancelling the attempt to install an ActiveX control, it began very realistically simulating a virus scan over hundreds of real-looking filenames and finding four or five “infections” in my computer with real-looking virus names. The “scan completed” dialog even grayed out the “scanner” background. This was slick and professional, much moreso than most clumsy attempts I see. If I were somebody’s grandmama I’d be pretty convinced.

When I left the page, it threw up another dialog box reminding me that my computer was still infected and that I could only be saved by installing their tool.

Bad news; other users should watch out.

Ok, guys, I need proof. Please download and install Fiddler or Fiddlercap, delete all cookies, temporary internet files and your Flash Cache as per instructions to the left of screen in the “News” section of this blog, and contact me if you manage to record a redirect at Hotmail.

We’ve been able to clean things up before, we can do it again.

Thanks!

Sandi &c.

Ok, guys, I need proof. Please download and install Fiddler or Fiddlercap, delete all cookies, temporary internet files and your Flash Cache as per instructions to the left of screen in the “News” section of this blog, and contact me if you manage to record a redirect at Hotmail.

We’ve been able to clean things up before, we can do it again.

Thanks!

Sandi &c.