Accessibility links
  • Skip to main content
News Icon NEWS FILTER
All News Security Education Videos Scams & Phishing Your Security Mobile Security Identity Theft Corporate Security
Search Icon SEARCH
 

Email Icon SUBSCRIBE TO WEEKLY NEWSLETTER
More Pop-Up Ads? Yes Please! Said No One. Ever!
Facebook   X   LinkedIn   Email

More Pop-Up Ads? Yes Please! Said No One. Ever!

March 25, 2024

Those intrusive pop-up ads that slow down our browsers and bounce the content we want to read are by most accounts, insufferable. Knowing that, developers have created ad blocker extensions to help with this annoying and potentially harmful web surfing issue. One self-proclaimed ad-blocking extension, AllBlock Chromium, however, is doing the exact opposite of what it says it does and those behind it are making profits off that broken promise.

In Reality, A Malicious Ad Injector

Those who downloaded AllBlock Chromium ad-blocking extension to squelch pop-up ads on Facebook and YouTube, as it claims to do, find themselves drowning in more pop-up ads than ever before. AllBlock Chromium, finds researchers at Imperva, is a malicious extension and deceptive ad-blocker. It contains a script that makes it an ad injector that increases the overall number of pop-up ads, for starters. Those who’ve downloaded this extension are redirected to fake sites created to promote these illegitimate ads.

Ad injectors insert unauthorized ads into a web page to invite users to click on them, generating revenue for their developers and others. For example, retail sites have become a favorite hunting ground for these malicious ad-injecting extensions. Their unauthorized product ads compete and steal clicks (and profit) from the retailer’s legitimate advertising.

Some ads are placed directly over or replace the original ads, making them impossible to see. Still others appear on web pages not intended for advertising, with many covering the written content. In one case, Adrozek ad injector that infected Chrome and Firefox browsers among others, was discovered infecting 30,000 devices a day at its peak last year.

Protection From Ad Injectors

All involved with creating and promoting malicious ad injectors play the blame game, making it impossible to pinpoint those responsible. Although Google Play and other app stores do their best to find and remove malicious extensions, they still sneak in as available for download. Once again, the responsibility lands on individual users to avoid these harmful extensions. Unless they are named, as with AllBlock Chromium, how can we possibly avoid them? Fortunately, there are answers to that question we can all benefit from.

  • Always check user reviews before downloading any extension. There you’ll find posted the good, bad, and ugly reviews that can help you decide whether it’s safe to download.
  • Unless there’s a specific need for an extension, there’s no reason to download them. Always turn off those you no longer need or use.
  • Take browser warnings seriously. Those claiming a software isn’t safe to use or suggest you leave a risky page and return to safety are there for good reason.
  • Remember to check the number of reviews for any app you are considering for download. If there are just a few, perhaps wait a while until others have reviewed them. If something is malicious, those with experience will certainly let you know there.

Fake Browser Updates Source Of Ransomware And Banking Malware

Scams & Phishing

Fake Browser Updates Source Of Ransomware And Banking Malware

An all-out alarm reported by Surcuri finds bogus alerts circulating about the need to download the latest browser update. Although it’s always recommended to keep software up to date, this report finds hackers are exploiting that call to action in a big way. Using fake updates isn’t exactly a new hacking exploit, but hackers are getting better at it over time and this latest attack is a solid example of that. In this latest discovery, hackers use email links or script code to compromise a webpage. READ FULL STORY








Close
Fraud News & Alerts!

Keep up with the latest cyber security news through our weekly Fraud News & Alerts updates. Each week you will receive an email containing the latest cyber security news, tips and breach notifications.



You're all set!

You will receive your first official security update email within the next week.

A welcome email has also just been sent to you. If you do not receive this email within the next few minutes, please check your Junk box or spam filter to confirm our emails are not being blocked.


 
Help  
Enter any word or words you like.        

The email newsletter will arrive from news@stickleyonsecurity.com


Loading
Please wait...