There are two of them, both featuring HP (the ads have been documented on this blog in the past).
Both advertisements are being served via 2mdn.net and have been reported to the appropriate parties.
m1.emea.2mdn.net/989589/hp_728x90.swf
m1.au.2mdn.net/1949664/hp_300x250.swf
These look like they are geotargetted to the US and Canada. Visitors elsewhere (e.g. the UK) may not have been exposed.
OneVision UK Ltd. have some software, Contenio, which will catch this kind of advertisement containing malware, either on your local server or on adserver. OneVision can install this for you to test, or firstly just send us one / some of the offending advert files and we will report back to you. Or call me 07799 767671. barry.tweddell@onevision.com
The malvertizements have been reported to blogads.com. z.blogads.com/www/delivery/afr.php?n+a91736e9&zoneid=86&cb=INSERT_RANDOM_NUMBER_HERE z.blogads.com/www/delivery/afr.php?n+aa00ce7a&zoneid=87&cb=INSERT_RANDOM_NUMBER_HERE The adverts hit statcluster.com, enjoyspringtime.com and crustat.com (all known bad domains).
Edited to fix subjectline It is a malvertizement featuring HP (visually identical to the HP malvertizement described in my earlier article): http://msmvps.com/blogs/spywaresucks/archive/2009/02/28/1674634.aspx The malvertizement itself is at this URL: m1.au.2mdn.net/1949664/hp_300x250.swf Adopstools test results here: http://www.adopstools.com/index.asp?section=quicklink&id=ZdWLlE0YcK7rkK5C […]
“ALERT: Malvertizing at guardian.co.uk”