Broadband Tech > Security > Security > Does anyone know anything about this advert?

reply to nil

Re: Does anyone know anything about this advert?

I can reproduce the original url (to googlesyndication) if that's any help

I've blocked eskimo.com and also emailed our adsense rep with a complaint. Unfortunately I really don't see how this can be avoided in future. I doubt any ad network is smart enough to vet and clean the click stream from any ad, and if they did when the ad was lodged what is to stop the landing page getting modified later?

reply to nwrickert
I recreated similar ads with the coloring and "feel" -- but I am not sure if they are related -- properties showed:

pagead2.googlesyndication.com/pagead/imgad?id=CJ_1t5_n5bHiowEQ2AUYTzIIQhaO6-aqw3E

pagead2.googlesyndication.com/pagead/imgad?id=CPvFnZC4uc-M0AEQ2AUYTzIIxm5IBBA487w

pagead2.googlesyndication.com/pagead/imgad?id=CPvFnZC4uc-M0AEQ2AUYTzIIxm5IBBA487w

The thing I noticed on the screenshot that was strange - was to the right the "served by google" was missing (usually shows next to our banners on the homepage)-- could be that it was there and just not caught on the screen shot.

reply to justin
Yes, I agree there is not a lot you can do to prevent this.

Based on a google search, eskimo.com was exploited, not doing this on purpose.
--
Life is too short to be boring

I assumed that.

Unfortunately, other sites will be similarly exploited.

It's definitely a php-based exploit, but not targeting all open source php apps (that I can tell so far), so probably looking for some specific code problem. An analysis of the source and libraries used by the known targets would probably narrow it down..
--
Life is too short to be boring

reply to justin
ZA has ad block which I've used without regret. This is only one more reason...
--
A triple espresso, please...