Internet users are exposed to hundreds of ads a day, distributed by various advertising networks. Unfortunately, automated ads can be used to spread malicious software. Even legitimate ad networks can be used by hackers to spread malicious code, due to the high volume of ads they are paid to distribute.
\r\nMalware spreaders hide code within legitimate-looking ads that can redirect your computer to connect to a malicious server to install malware. The worst malvertising connects users' computers to an exploit kit that runs analysis on the defending computer, looking for vulnerabilities and exploiting them. From there, attackers can install malware or ransomware or even gain full access to your computer and its sensitive information.
\r\nEarly malvertising attempted to trick users into clicking banner ads, such as by claiming their computer was already compromised by viruses and that they should install an antivirus. These days, you don't even have to click on the malicious advertisement for it to run exploits, which can start automatically and in the background.
\r\nAttackers take advantage of the automated nature of online advertising, with large companies turning to networks to choose which ads to display on their websites. Although most reputable advertising networks examine the advertisements they serve, malicious code can still slip through the network's checks. Malvertising has made its way to large websites, including The New York Times, the BBC, AOL and the NFL as recently as 2016, according to the Center for Internet Security.
\r\n\"Malvertising\" is an industry term for the way cybercriminals add malware to advertisements. Malvertising can appear anywhere, including on sites you visit every day. It looks the same as traditional ads, but it redirects you to an unsecured webpage that adds malicious code to your computer or mobile device. Viruses and phishing software can then be installed on your device.
\r\nTrend Micro and other antivirus software providers have detailed ad campaigns from large companies that have turned out to be malvertising. The New York Times fell victim to a banner ad that installed malicious code after web users clicked on it. The London Stock Exchange was part of a malvertising incident that allowed hackers to breach its system and access user data.
\r\nThe risk of malvertising infecting users' computers has created a dilemma between internet users and ad distributors. To defend against malvertising, users are advised to update the scripts that ads run on, such as Java, Flash and Microsoft Silverlight, and to keep their anti-malware software up to date. However, to further ensure they avoid malicious advertisements, users will stop ads completely by installing ad blockers or disabling scripts like Java and Flash from running on their browser. This leads to a loss of revenue for the website displaying ads, which may prompt those companies to prevent ad-blocking users from using their sites.
\r\nYour website may also be flagged by search engines for hosting malware, affecting your SEO and even blacklisting your site from showing up in search results. According to the Interactive Advertising Bureau, malvertising costs the digital marketing industry more than $1 billion in lost revenue from ad blocking in addition to the costs of investigating and curbing malvertising.
\r\nWhile ad networks work to improve safeguards and prevent malvertising from being distributed to their partners, there are a few things you can do to prevent malicious advertising from affecting your users and ruining your reputation. It will require some vigilance on your part to protect your website visitors.
\r\nMake sure you deal only with reputable advertising networks that run fraud detection on their advertisements. You also need to examine the ads your website is running. You can do this safely with domain research tools, such as DomainTools, that let you examine URLs without entering them.
\r\nAccording to Google's anti-malvertising guide, you should search for suspicious redirects and iFrames. If the ad's script contains suspicious code, including encrypted code, treat it with suspicion. Remove the ad from your website and report it to your ad network. If your network allows you to swap it out with another, then do so. If this is a frequent issue, you should switch to a different ad network.
\r\nThere are several ad verification services that can act as watchdogs for your website. Companies such as GeoEdge and The Media Trust have add-ons that scan advertisement code to backcheck it against trusted sources and look for suspicious code.
\r\nBe sure to protect your own computers and servers when dealing with suspect ads, as you can also be a victim of malware from the malicious ads. You could be targeted with ransomware that locks down your whole website, so be sure to keep backups and strong anti-malware software in place.
\r\nIf Google, Bing or another search engine flags your website for distributing malware, you can usually file an appeal to that search engine when you've removed the malvertising.
\r\nLike any malware, malvertising is invasive and continually changing. While ad networks and the online advertising industry are addressing malvertising, and the use of third-party ad verification tools and anti-malware is recommended, it ultimately comes down to you to make sure your website is not spreading malware. Those precautions don't remove the need for a knowledgeable and vigilant eye on the code that goes through your website.
\n","docType":"article","guid":"articles_c1214ba28b8ea9b13d44d85121fa45fd","lastModified":"2020-06-15T17:38:00.000Z","published":"2018-02-05T08:00:00.000Z","structuredData":null,"subtitle":"Cybercriminals can strike using your company's digital advertisements.","template":"v1","title":"How to Beat Malvertising","type":"article","author":{"avatar":null,"bio":"The purpose of our community is to connect small business owners with experienced industry experts who can address their questions, offer direction, and share best practices.","name":"business.com editorial staff","image":null,"slug":null,"social":{"facebook":"","linkedin":"https://www.linkedin.com/company/business-com-/","twitter":"https://twitter.com/businessdotcom","website":"https://www.business.com/"},"status":"enabled","title":null,"type":"Old BDC Member","user":{"imagePath":"https://staging.business.com/images/uploads/user/profile/b14a2c1fa0158a2f46854597139a2067ee8ef.jpg","profile":{"company":"","jobTitle":"","website":"https://www.business.com/"}}},"breadcrumbs":null,"channels":{"primary":{"name":"Technology","slug":"technology"},"sub":{"name":"Security","slug":"security"}},"meta":{"robots":"index, follow","description":"One of cybercriminals' current tactics is attacking visitors to your website using exploits in your site's digital advertisements. Here's what you can do.","title":"How to Beat Malvertising - business.com"},"parsedContent":{"toc":[{"id":"what-is-malvertising,-and-how-does-it-work","title":"What is malvertising, and how does it work?"},{"id":"examples-of-malvertising","title":"Examples of malvertising"},{"id":"the-effects-of-malvertising","title":"The effects of malvertising"},{"id":"stopping-malvertising","title":"Stopping malvertising"}],"json":[{"component":"ul","children":[{"component":"li","children":["Malvertising is a tool used by cybercriminals to target users through digital advertisements on businesses' websites and social media."]},{"component":"li","children":["When a user clicks a malvertising ad, it takes them to a landing page that may install viruses or phishing software on their computer."]},{"component":"li","children":["The digital marketing industry has lost an estimated $1 billion from blocking malvertising attempts. However, there are certain steps you can take to protect visitors to your website from malvertising."]}]},{"component":"p","children":["Internet users are exposed to hundreds of ads a day, distributed by various advertising networks. Unfortunately, automated ads can be used to spread malicious software. Even legitimate ad networks can be used by hackers to spread malicious code, due to the high volume of ads they are paid to distribute."]},{"component":"p","children":["Malware spreaders hide code within legitimate-looking ads that can redirect your computer to connect to a malicious server to install malware. The worst malvertising connects users' computers to an exploit kit that runs analysis on the defending computer, looking for vulnerabilities and exploiting them. From there, attackers can install malware or ransomware or even gain full access to your computer and its sensitive information."]},{"component":"p","children":["Early malvertising attempted to trick users into clicking banner ads, such as by claiming their computer was already compromised by viruses and that they should install an antivirus. These days, you don't even have to click on the malicious advertisement for it to run exploits, which can start automatically and in the background."]},{"component":"p","children":["Attackers take advantage of the automated nature of online advertising, with large companies turning to networks to choose which ads to display on their websites. Although most reputable advertising networks examine the advertisements they serve, malicious code can still slip through the network's checks. Malvertising has made its way to large websites, including The New York Times, the BBC, AOL and the NFL as recently as 2016, according to the ",{"component":"a","props":{"href":"https://www.cisecurity.org/malvertising/","target":"_blank","rel":"nofollow"},"children":["Center for Internet Security."]}]},{"component":"h2","props":{"id":"what-is-malvertising,-and-how-does-it-work"},"children":["What is malvertising, and how does it work?"]},{"component":"p","children":["\"Malvertising\" is an industry term for the way cybercriminals add malware to advertisements. Malvertising can appear anywhere, including on sites you visit every day. It looks the same as traditional ads, but it redirects you to an unsecured webpage that adds malicious code to your computer or mobile device. Viruses and phishing software can then be installed on your device."]},{"component":"h2","props":{"id":"examples-of-malvertising"},"children":["Examples of malvertising"]},{"component":"p","children":[{"component":"a","props":{"href":"https://blog.trendmicro.com/","target":"_blank","rel":"nofollow"},"children":["Trend Micro"]}," and other antivirus software providers have detailed ad campaigns from large companies that have turned out to be malvertising. The New York Times fell victim to a banner ad that installed malicious code after web users clicked on it. The London Stock Exchange was part of a malvertising incident that allowed hackers to breach its system and access user data."]},{"component":"h2","props":{"id":"the-effects-of-malvertising"},"children":["The effects of malvertising"]},{"component":"p","children":["The risk of malvertising infecting users' computers has created a dilemma between internet users and ad distributors. To defend against malvertising, users are advised to update the scripts that ads run on, such as Java, Flash and Microsoft Silverlight, and to keep their anti-malware software up to date. However, to further ensure they avoid malicious advertisements, users will stop ads completely by installing ad blockers or disabling scripts like Java and Flash from running on their browser. This leads to a loss of revenue for the website displaying ads, which may prompt those companies to prevent ad-blocking users from using their sites."]},{"component":"p","children":["Your website may also be flagged by search engines for hosting malware, affecting your SEO and even blacklisting your site from showing up in search results. According to the ",{"component":"a","props":{"href":"https://www.iab.com/news/digital-ad-industry-will-gain-8-2-billion-by-eliminating-fraud-and-flaws-in-internet-supply-chain-iab-ey-study-shows/","target":"_blank","rel":"nofollow"},"children":["Interactive Advertising Bureau"]},", malvertising costs the digital marketing industry more than $1 billion in lost revenue from ad blocking in addition to the costs of investigating and curbing malvertising."]},{"component":"h2","props":{"id":"stopping-malvertising"},"children":["Stopping malvertising"]},{"component":"p","children":["While ad networks work to improve safeguards and prevent malvertising from being distributed to their partners, there are a few things you can do to prevent malicious advertising from affecting your users and ruining your reputation. It will require some vigilance on your part to protect your website visitors."]},{"component":"p","children":["Make sure you deal only with reputable advertising networks that run fraud detection on their advertisements. You also need to examine the ads your website is running. You can do this safely with domain research tools, such as ",{"component":"a","props":{"href":"https://www.domaintools.com/","target":"_blank","rel":"nofollow"},"children":["DomainTools"]},", that let you examine URLs without entering them."]},{"component":"p","children":["According to Google's ",{"component":"a","props":{"href":"https://anti-malvertising.withgoogle.com/tips-for-publishers","target":"_blank","rel":"nofollow"},"children":["anti-malvertising guide"]},", you should search for suspicious redirects and iFrames. If the ad's script contains suspicious code, including encrypted code, treat it with suspicion. Remove the ad from your website and report it to your ad network. If your network allows you to swap it out with another, then do so. If this is a frequent issue, you should switch to a different ad network."]},{"component":"p","children":["There are several ad verification services that can act as watchdogs for your website. Companies such as ",{"component":"a","props":{"href":"https://www.geoedge.com/","target":"_blank","rel":"nofollow"},"children":["GeoEdge"]}," and ",{"component":"a","props":{"href":"https://www.themediatrust.com/","target":"_blank","rel":"nofollow"},"children":["The Media Trust"]}," have add-ons that scan advertisement code to backcheck it against trusted sources and look for suspicious code."]},{"component":"p","children":["Be sure to protect your own computers and servers when dealing with suspect ads, as you can also be a victim of malware from the malicious ads. You could be targeted with ransomware that locks down your whole website, so be sure to keep backups and strong anti-malware software in place."]},{"component":"p","children":["If Google, Bing or another search engine flags your website for distributing malware, you can usually file an appeal to that search engine when you've removed the malvertising."]},{"component":"p","children":["Like any malware, malvertising is invasive and continually changing. While ad networks and the online advertising industry are addressing malvertising, and the use of third-party ad verification tools and anti-malware is recommended, it ultimately comes down to you to make sure your website is not spreading malware. Those precautions don't remove the need for a knowledgeable and vigilant eye on the code that goes through your website."]}]},"resource":null,"sponsorship":{"sponsorType":"no-sponsor","name":null,"thumbnail":null,"bio":null,"slug":null,"status":null,"social":{"website":null,"linkedin":null,"twitter":null,"facebook":null}},"thumbnail":{"path":"https://staging.business.com/images/content/5ed/78d2f7b4374e90e8b45a3/1500-0-","caption":"Zephyr18 / Getty Images","isBlurred":false},"bestPicks":null},"related":{"relatedArticles":[{"title":"PowerShell: Everything You Need to Know","canonical":"https://www.business.com/articles/powershell-everything-you-need-to-know/","slug":"powershell-everything-you-need-to-know","thumbnail":"https://www.business.com/images/content/5b8/998581039eb8f738b457b/1500-0-","dek":"What you need to know to unlock Microsoft PowerShell's full capabilities.","lastModified":"2018-09-05T17:00:00Z","published":"2018-09-05T17:00:00Z","sponsored":false},{"title":"Decoding the Hierarchy of Data Protection","canonical":"https://www.business.com/articles/data-protection-hierarchy/","slug":"data-protection-hierarchy","thumbnail":"https://www.business.com/images/content/5ad/e2b331039eba5148b456a/1500-0-","dek":"What are your options for protecting your data and how do you decide on a strategy?","lastModified":"2018-04-23T19:00:00Z","published":"2018-04-23T19:00:00Z","sponsored":false},{"title":"How Technology Is Changing Online Advertising","canonical":"https://www.business.com/articles/how-technology-is-changing-online-advertising/","slug":"how-technology-is-changing-online-advertising","thumbnail":"https://www.business.com/images/content/5a6/621c751ee4708458b458f/1500-0-","dek":"Advertisers must adapt to new technology or be ignored online.","lastModified":"2020-07-14T17:07:00Z","published":"2018-01-22T08:00:00Z","sponsored":false},{"title":"Cloud Encryption: Using Data Encryption in The Cloud","canonical":"https://www.business.com/articles/cloud-data-encryption/","slug":"cloud-data-encryption","thumbnail":"https://www.business.com/images/content/5d0/8eac17b437482458b4578/1500-0-","dek":"Data security remains a top concern in cloud adoption.","lastModified":"2018-07-03T12:10:00Z","published":"2018-07-03T12:10:00Z","sponsored":false},{"title":"How to Improve Your Business's SEO Results on Google","canonical":"https://www.business.com/articles/improve-business-seo-on-google/","slug":"improve-business-seo-on-google","thumbnail":"https://www.business.com/images/content/5a3/95db692a3a4f71b8b457e/1500-0-","dek":"Improving your rank on Google means creating SEO-friendly web pages.","lastModified":"2018-01-02T17:36:00Z","published":"2018-01-02T17:36:00Z","sponsored":false},{"title":"How Crooks Hack Passwords and How You Can Protect Your Business","canonical":"https://www.business.com/articles/how-crooks-hack-passwords/","slug":"how-crooks-hack-passwords","thumbnail":"https://www.business.com/images/content/5a7/2321651ee47ea618b4568/1500-0-","dek":"The use of traditional passwords is a slippery slope for companies these days.","lastModified":"2018-01-31T08:00:00Z","published":"2018-01-31T08:00:00Z","sponsored":false},{"title":"Your Guide to Creating a Small Business Marketing Plan","canonical":"https://www.business.com/articles/sample-marketing-plan-outline-and-template/","slug":"sample-marketing-plan-outline-and-template","thumbnail":"https://www.business.com/images/content/5f3/3e1765a215eb62d8b4567/1500-0-","dek":"Follow these templates and guidelines to get started on creating your business's marketing plan.","lastModified":"2020-08-12T12:28:00Z","published":"2018-03-02T13:00:00Z","sponsored":false},{"title":"Endpoint Protection vs. Anti-Malware: What You Need to Know","canonical":"https://www.business.com/articles/endpoint-protection-vs-anti-malware-business/","slug":"endpoint-protection-vs-anti-malware-business","thumbnail":"https://www.business.com/images/content/5ad/527d892a3a45a3e8b4592/1500-0-","dek":"Learn which cybersecurity solution is best for your business.","lastModified":"2017-04-17T12:00:00Z","published":"2017-04-17T12:00:00Z","sponsored":false},{"title":"How to Drive Sales With Google Ads","canonical":"https://www.business.com/articles/google-adwords-how-to/","slug":"google-adwords-how-to","thumbnail":"https://www.business.com/images/content/5a3/82b721039ebd1528b459a/1500-0-","dek":"Ads is a powerful tool for small businesses, but you need to know how to use it.","lastModified":"2018-09-13T18:05:00Z","published":"2018-09-13T18:05:00Z","sponsored":false},{"title":"How to Assess the Cybersecurity Risk of Your Small Business","canonical":"https://www.business.com/articles/assess-small-business-cybersecurity/","slug":"assess-small-business-cybersecurity","thumbnail":"https://www.business.com/images/content/5ed/118db7b437422298b4576/1500-0-","dek":"Security risk profiles can help quantify cybersecurity risk.","lastModified":"2020-06-03T13:41:00Z","published":"2018-06-15T13:30:00Z","sponsored":false},{"title":"From COVID-19 to Hurricane Season: Disaster Preparedness for Small Business","canonical":"https://www.business.com/articles/business-disaster-prep/","slug":"business-disaster-prep","thumbnail":"https://www.business.com/images/content/5e7/a495e5a215eb11d8b4569/1500-0-","dek":"Natural disasters – whether a hurricane, tornado or outbreak like COVID-19 – can have a disastrous effect on small businesses, but they don't have to. Here's how to weather a disaster successfully.","lastModified":"2020-03-25T15:19:00Z","published":"2018-09-26T07:00:00Z","sponsored":false},{"title":"Choosing the Best Email Marketing Services and Software","canonical":"https://www.business.com/articles/choosing-email-marketing-software/","slug":"choosing-email-marketing-software","thumbnail":"https://www.business.com/images/content/591/b3d0b1039eb7d688b4567/1500-0-","dek":"Email is an important part of your marketing campaign, so you need the best software.","lastModified":"2017-06-07T20:00:00Z","published":"2017-06-07T20:00:00Z","sponsored":false}],"relatedReviews":[{"doc_type":"category","thumbnail":"https://staging.business.com/images/rz/5df908cc5a215e8c4a8b4568/conferencecall_Antonio_Diaz_Getty.jpg","canonical":"https://staging.business.com/categories/best-conference-call-services/","title":"The Best Conference Call Services of 2021","dek":"Which conference call service is right for your business in 2021? We review the top-rated services.","slug":"best-conference-call-services","lastModified":"2021-03-17T18:17:00Z"},{"doc_type":"category","thumbnail":"https://staging.business.com/images/rz/5e00d4787b43745d6a8b456e/Laptop_undrey_getty.jpg","canonical":"https://staging.business.com/categories/employee-monitoring-software/","title":"The Best Employee Monitoring Software of 2021","dek":"We've narrowed down the best employee monitoring software for businesses. Check out our best picks and reviews.","slug":"employee-monitoring-software","lastModified":"2021-03-05T15:40:00Z"},{"doc_type":"category","thumbnail":"https://staging.business.com/images/rz/5df905909c658a7e538b4567/Faxing_junce_Getty.jpg","canonical":"https://staging.business.com/categories/online-fax-services/","title":"The Best Online Fax Services of 2021","dek":"Online fax services are growing as more companies divest from conventional fax machines in favor of an automated, scalable and cost-effective option. Here's a look at some of the best online fax services on the market. ","slug":"online-fax-services","lastModified":"2021-03-02T16:07:00Z"}],"relatedSponsoredArticles":null}},"pageContext":{"displayModified":"2020-06-15T17:38:00.000Z","template":"v1","title":"How to Beat Malvertising","meta":{"robots":"index, follow"},"docType":"articles","slug":"how-to-beat-malvertising","canonical":"https://staging.business.com/articles/how-to-beat-malvertising/","skipTOC":false}},"staticQueryHashes":[]}