want another reason to keep ADBlock active? how about ransomware .. yep!

[zMeul]

sources

• http://arstechnica.com/security/2016/03/big-name-sites-hit-by-rash-of-malicious-ads-spreading-crypto-ransomware/
• http://blog.trendmicro.com/trendlabs-security-intelligence/malvertising-campaign-in-us-leads-to-angler-exploit-kitbedep/
• https://www.trustwave.com/Resources/SpiderLabs-Blog/Angler-Takes-Malvertising-to-New-Heights/
• https://blog.malwarebytes.org/malvertising-2/2016/03/large-angler-malvertising-campaign-hits-top-publishers/

 

Quote

Mainstream websites, including those published by The New York Times, the BBC, MSN, and AOL, are falling victim to a new rash of malicious ads that attempt to surreptitiously install crypto ransomware and other malware on the computers of unsuspecting visitors, security firms warned.

 

The tainted ads may have exposed tens of thousands of people over the past 24 hours alone, according to a blog post published Monday by Trend Micro. The new campaign started last week when "Angler," a toolkit that sells exploits for Adobe Flash, Microsoft Silverlight, and other widely used Internet software, started pushing laced banner ads through a compromised ad network.

 

According to a separate blog post from Trustwave's SpiderLabs group, one JSON-based file being served in the ads has more than 12,000 lines of heavily obfuscated code. When researchers deciphered the code, they discovered it enumerated a long list of security products and tools it avoided in an attempt to remain undetected.

---

 

I have no words ...

just last week Adobe released a security update for Flash that included 32 critical vulnerabilities:

 

I have ADBlock Plus and Element Blocker installed since "forever" and I won't disable them for anything

if and when it becomes obsolete, I will jump to another one, uBlock Origin seems like a valid alternative

 

update your Java, or remove it

update your Flash player, or remove it

update your Silverlight, or remove it

update your fucking browsers, or you risk losing it all

[Najuno]

Sounds pretty bad... but I´ve kept and always keep my Adblock active.

[Linus_torvalds]

14 minutes ago, zMeul said:

 

update your Java, or remove it   

update your Flash player, or remove it

update your Silverlight, or remove it

update your fucking browsers, or you risk losing it all

1 Always updated

2 Do not have

3 Do not have

4 Always updated 

[Sportiva]

Annnnnd thats why i only turn add block off to LTT and youtube,

[DevilishBooster]

I will say it once again, "The world is full of douche-nozzles".

Sometimes I wish I could just completely unplug from society and go live in a cabin in the mountains. *le sigh*

[Monkey Dust]

The media companies that rely on ad revenue really aren't doing themselves any favours.

[AnnoyedShelf]

Don't use adblock.  Use uBlock Origin.  the new guy that runs ADBlock lets companies pay him off to let their ads through.

[Deli]

You can get infected just by visiting mainstream websites.

 

So many people still advocate "Don't need anti-virus program, just use common sense". Good luck.

[lightningterror]

1 hour ago, AnnoyedShelf said:

Don't use adblock.  Use uBlock Origin.  the new guy that runs ADBlock lets companies pay him off to let their ads through.

I have " Allow some non-intrusive advertising" unchecked so I'm not worried.

[KingUnicorn]

1 hour ago, Deli said:

You can get infected just by visiting mainstream websites.

 

So many people still advocate "Don't need anti-virus program, just use common sense". Good luck.

Sadly that's what happened to my dad. He got a metric butt ton of viruses all because he never ran the Anti-virus and anti-malware. I told him that his methods were not effective but he was all like "it's fine. I know what I'm doing". That is why when I get a new pc at his place I will keep him from downloading anything without me checking it over.

[BuckGup]

Woah gotta tell my friend this

[AnnoyedShelf]

30 minutes ago, lightningterror said:

I have " Allow some non-intrusive advertising" unchecked so I'm not worried.

I still wouldn't use it, but whatever floats your boat.

[suicidalfranco]

i'm on linux and never use my windows VM for browsing so, eeeeeee meh

[zMeul]

23 minutes ago, suicidalfranco said:

i'm on linux and never use my windows VM for browsing so, eeeeeee meh

that's what Apple users said, was it a week ago ?! 

[suicidalfranco]

still safe while i click on every banner of every obscure porn website just cause i can

being part of minorities rocks

[mach]

I am going to browse only with adblock enabled, scriptsafe enabled, and have the browser contained inside a disposable sandbox, which is created on a ramdisk. Whenever the sandbox got compromised(not likely though) I just reboot my computer immediately. 

[EChondo]

I have already switched to uBlock Origin since AB/ABP have been extremely untrustworthy these past few years.

 

The only website I need flash for is Twitch, but I just found a program called "Twitcha" that lets me follow(or link my account) any game and streamer and lets me watch their stream through VLC. Way better and there's an in-program chat window, but I don't use chat so I don't know how well it works.

 

I think older Minecraft versions or mods still require Java, but I only play the later ones so no Java needed for me.

 

It's really worrisome that these things happen and it seems no one wants to put a permanent stop to them. Always just workarounds.

[Katorice]

ads are cancer. almost literally by the looks of it.

[Lynx]

Ransomware and mainstream site?

 

OK, no more reason for disabling my Ublock Origin and Disconnect I guess.

 

 

[Beskamir]

I wish I didn't have to learn Java C++ sounds so much better and if Java was less popular I wouldn't have to deal with it's security flaws.

[Energycore]

I have adblock, noscript and ghostery on firefox and some tracker still somehow managed to bypass all that. Now all the ads i get in my phone (!) are from some hardware store that operates in my city. GG.

[SpaceNugget]

1 hour ago, ElfFriend said:

I wish I didn't have to learn Java C++ sounds so much better and if Java was less popular I wouldn't have to deal with it's security flaws.

public int squaresum ( int a, int b ) {
	return ((a+b)*(a+b));
}

Tell me if that is Java or C++

You aren't going to benefit any more from C++ first, problem solving is language independant.

 

And you aren't going to be exposing your first java programs on the web, so don't worry about any "security flaws" you seem to think there are.

[zMeul]

4 minutes ago, WaxyMaxy said:

You aren't going to benefit any more from C++

please give me all call when someone makes a bootloader out of JAVA 

[Beskamir]

31 minutes ago, WaxyMaxy said:

public int squaresum ( int a, int b ) {
	return ((a+b)*(a+b));
}

Tell me if that is Java or C++

You aren't going to benefit any more from C++ first, problem solving is language independant.

 

And you aren't going to be exposing your first java programs on the web, so don't worry about any "security flaws" you seem to think there are.

Yeah I know they are pretty similar, but having Java installed allows unwanted code to have a much easier time running on my system than if I didn't have it installed. I'd still need to allow it to run and all but with Java installed it can run where as not having it installed would make it pretty much impossible for Java programs to run. So I actually have to be careful now also Java's update prompt is about as annoying as they get...

[Castdeath97]

2 hours ago, ElfFriend said:

I wish I didn't have to learn Java C++ sounds so much better and if Java was less popular I wouldn't have to deal with it's security flaws.

Java isn't supposed to be your main coding language, you learn Java to make it easier for you to learn any other language. Once you understand how one language works, going through the syntax of other languages becomes a breeze.

 

And not all Java programs are web plugin apps ;).

 

 

1 hour ago, WaxyMaxy said:

public int squaresum ( int a, int b ) {
	return ((a+b)*(a+b));
}

Tell me if that is Java or C++

You aren't going to benefit any more from C++ first, problem solving is language independant.

 

And you aren't going to be exposing your first java programs on the web, so don't worry about any "security flaws" you seem to think there are.

I can't yet say if this is valid c++ yet but I'm sure that it's valid Java.