Home Business Integrity monitoring to contain Clickjacking

Integrity monitoring to contain Clickjacking

by Editor's Desk
Cyber Crime, selected focus on enter button background
Using monitoring tools to help detection of malicious activities

Cybercriminals are now using compromised websites and ad fraud to hijack revenue from online business owners through clickjacking. Bleeping Computer reported recently that researchers had detected two campaigns in the past few weeks that seem unrelated. Both errant operations exploited Google’s specialist service AdSense, which gives website holders the opportunity to run advertisements alongside their content.Security concept: Cyber Crime on computer keyboard background

(Source: Google)

Tip-off

Cybersecurity firm Sucuri discovered a campaign that focused on fake ad panels. Experts analysed giant ads that ran over content on a series of compromised websites and found that the attacks relied on the insertion of malicious JavaScript code that placed the giant Google ads on top of the website’s own content.logo

The assaults ran on both desktop as well as sites and across a variety of platforms, including WordPress, Joomla and HTML-based sites.

Clickjacking worth Billions

Rather than running on compromised pages, the second campaign involved pushing users to nefarious websites, according to security firm Malwarebytes. The company described the attack as a ‘clickjacking’ campaign in which errant individuals were abusing Google ads for personal financial gains, potentially costing authentic businesses billions of dollars.

Any visitors to a high-traffic adult site were automatically redirected to a separate page that appeared to stream other adult videos. The second website was, in fact, fake. Visitors trying to play the video were directed to a hidden ad. Unwitting clicks on this paid ad generated cash for the criminals behind the scam, SC Magazine reported.

Cyber-crime (1)

(Source: Google)

Fraud Fuelling the Ad Market

Although probably unrelated, both campaigns caused problems for users and business owners related to potential security concerns and financial loss. Malwarebytes directly implied that there is a direct correlation between growth in the ad market and fraud.

For its part, Sucuri suggested that this type of ad fraud has become increasingly common. If there is money to be made, criminals will look for potential loopholes.

Business owners and website managers should beware of the risk posed by ad fraud and clickjacking. These stakeholders should also regularly check the Google ads on their sites and consider using tools to help monitor malicious activity. Integrity monitoring technology is likely to help them stay on top of website modifications and unwanted alterations.
seo checker
www.TrickyScribe.in
Protected by Copyscape

Page Views: 1,14,035

You may also like

Total Visits: 2,61,76,022 | Post Views: 1,14,035

This website uses cookies to improve your experience. We'll assume you're ok with this, but you can opt-out if you wish. Accept Read More