Google Survey Finds More than 5 Million Users Infected with Adware

Ad-Injecting Malware is One of the Most Reliable Scams on the Web. Once a Computer's Infected, the Virus will Drop New Ads into any Website it Visits, Sending Ad Revenue Back to the Scammers Who Control it. Users May Even Know the Name of the Program but, they're Powerless to Remove it. According to New Research from Google and UC Berkley, the Scam is still Going Strong, despite More than a Decade of Work to Stamp it Out. Released Now, the Study Looked at Computers Visiting Google Sites from June to October of 2014, Replaying Network Requests to See if Bogus Ads were being Injected Locally. Over those 5 Months, the System Detected 5,339,913 Different IP Addresses Infected with Adware, Roughly 5.5% the Total Requests.


It's a Staggering Number but, if Anything it's Likely to be an Underestimate, since Adware Programs Often Decline to Tamper with Large Company Sites so, as to Avoid Detection. The Research also Found that, the Infamous Superfish Adware is Alive and Well. Superfish was the Most Popular Ad Injector Detected by the Study, Impacting More than 3.7 Million Pageviews. The Program Became Notorious after it was Discovered Pre-Installed on certain Lenovo Laptops, Breaking SSL Protections for any Computer Running it. Despite the Bad Press, Superfish Appears to still be Doing Good Business, Either through Other Unreported Installation Deals or Software Bundles that Trick Hapless Users into Installing Superfish onto their Own Machines. Shopping Programs like Jollywallet were also Popular, as well as, Affiliate Bundlers like Crossrider and Netcrawl, All of which Operate as Legitimate Businesses.


Google has Taken a Number of Steps to Fight that Ecosystem in Recent Months. Just Last Month, the Company Stopped Accepting AdWords Ads for Free Desktop Software like WinZip, VLC and Web Browsers. That's Important because, Adware has Typically Traveled by Bundling with Free Software. If you Clicked on a Sponsored Ad for a Free Firefox Download in 2014, Odds are, it would Direct you to a Bundle: One Free Copy of Firefox with a Dozen Different Adware Programs like Superfish that, Would Help the Advertiser Make Back their Money. Cutting Off those Ads Means, those Adware Vendors will be Effectively Cut Out of Google Search, a Change Anti-Adware Advocates like Harvard Business School's Ben Edelman Have Long been Pushing for.


"It's a step in the right direction", Edelman Said When Notified of the Change. "They could have done this a long time ago but, better late than never." More Broadly, the Study suggests a Renewed Effort against the Adware Ecosystem, with Google Leading the Charge alongside Academic Researchers. For Many of the Researchers Involved in the Study, Programs like Superfish Cut against the Basic Values of Computing. "Ad injection undermines the integrity of user interactions", Said Vern Paxson, a Professor at UC Berkeley Who Worked on the Research. "In broader terms, the question of just who ultimately controls the information presented to users is of great and increasing importance. It's one of the most vital issues the digital world faces."




Info Sources:

https://cdn3.vox-cdn.com/uploads/chorus_asset/file/3673260/ad_injector_paper.0.pdf

http://googleonlinesecurity.blogspot.com/2015/05/new-research-ad-injection-economy.html