main
Report a problem

Hundreds Click on 'Click Here to Get Infected' Ad

Slimy   on 19 May 2007 - 20:24 · 45 comments & 20286 views

Advertisement (Why?)
Over the course of 6 months, 409 people clicked on an ad that offered infection for those with virus-free PCs. Didier Stevens, who ran the ad via Google Adwords, works for Contraste Europe, a branch of the IT consultancy The Contraste Group. Stevens says that he got the idea after picking up a small book on Google Adwords at the library and finding out how easy and cheap it is to set up an ad. "You can start with a couple of euros per month. And that gave me an idea: this can be used with malicious [intent]. It's a way to get a drive-by download site on the first page of a search."

Stevens bought the drive-by-download.info domain, set up a server to display a "Thank you for your visit" message and to log the requests. No PCs were harmed in this experiment, he emphasizes. Then he started the Google Adwords campaign, using combinations of the words "drive-by download" along with the ad. His ad was viewed 259,723 times and clicked on 409 times, for a click-through rate of about 0.16%. The experiment cost him $23, or 6 cents per click/potentially infected machine.

Of the 409 people who clicked, 98% were running Windows machines, according to the user agent string, which is a text string that identifies a Web site visitor to a server. Users using different versions of IE, Safari, Opera, Firefox and SeaMonkey all clicked the ad. Stevens says that he designed his ad to make it look fishy, but he had no problem getting Google to accept it and has had no complaints to date. And, although a healthy amount of people clicked on it, he said there's "no way to know what motivated them to click on my ad. I did not submit them to an IQ-test." Stevens said he's sure he could get much more traffic if he invested more in his Google Adwords budget and came up with a better designed ad.

View: Drive-By Download
News source: Physorg

Post a comment · Send to friend Comments · There are 45 additional comments
#1 Ap0X on 19 May 2007 - 20:36
LOL...i wanna click too!
#2 nicholas-c on 19 May 2007 - 20:36
its so... tempting!!
(3 replies) #3 digitalsoft on 19 May 2007 - 20:43
i click on anything that tells me to click on it... im just a loser lol, though i know its impossible for me to get any serious viruses or anything so im ok just cant resist
#3.1 digitalsoft on 19 May 2007 - 21:17
i must note that i only do this when im bored! lol, im not an actual retard.
#3.2 dhitb on 20 May 2007 - 06:31
Related question: are you more or less inclined to click on something that says not to click it?

#3.3 whocares78 on 22 May 2007 - 08:20
umm do you have any idea waht you are actually saying, you click stuff that looks dodgy because you are some super special being that does not get infected by viruses??

have to agree with you, you are a loooser
#4 Tantawi on 19 May 2007 - 20:58
I think they really need an IQ test
(6 replies) #5 Computer Guru on 19 May 2007 - 21:01
Lol, what the article says is: "98% of stupid people use Windows. The browser of choice does not reflect levels of stupidity, or lack thereof."
#5.1 Croquant on 20 May 2007 - 04:53
Quote - (Computer Guru said @ #5)
Lol, what the article says is: "98% of stupid people use Windows. The browser of choice does not reflect levels of stupidity, or lack thereof."

Neither does the OS of choice. Don't be childish, OK?
#5.2 +Octol on 20 May 2007 - 05:08
Quote - (Computer Guru said @ #5)
Lol, what the article says is: 98% of stupid people use Windows.

What's funny about that? The statement is more or less true.

Now tell me you're smart enough to distinguish between the following two statements:

Quote -
98% of stupid people use Windows.

98% of Windows users are stupid.
#5.3 plastikaa on 20 May 2007 - 22:38
Actually it says neither, if you're going to make some statistical analysis of what it says then at least know what you are talking about. How many "stupid people" dont even use a computer? Oh wait that screws your statement up just for starters. And the clearest thing you are missing is - what about the proportion of users... if for example more than 98% of of the population uses Windows then technically they would be less stupid on average. Did you think about that? To be honest I thin kthe fact 98% figure shows very little when you take that into account.

I don't wanna dig at apple but you seem to be a pathetic fanboy so lets give you something to moan about....

Maybe what this actually says is: Apple are so stupid they are only able to get less than 2% of stupid people to buy their computers.

Or even maybe Apple have less than 8 people use their computers, (2% of the 409) and infact all of them clicked it?

Oh look I can be childish too! yay!
#5.4 +Octol on 21 May 2007 - 18:21
Quote - plastikaa said
Actually it says neither, if you're going to make some statistical analysis of what it says then at least know what you are talking about.

On the off chance you're referring to my comment above, let me invite you to read the relevant part of it again:

Quote - Octol said
Now tell me you're smart enough to distinguish between the following two statements:

Quote -
98% of stupid people use Windows.

98% of Windows users are stupid.

I was making no assertions whatsoever. I was asking if someone could distinguish between the two statements. Since many people seem to think that both statements mean the same thing – which they certainly do not – it was a reasonable question.

However, I also did say earlier that the statement of, "98% of stupid people use Windows", was "more or less true". So what did I mean?

Obviously, if a majority of all computer users (±86%) run one or another version of Windows – and some of them are stupid – then it's reasonable to assume that a majority of stupid computer users run Windows. Of course that also necessarily means that a majority of computer users who are not stupid also use Windows.

Ultimately, an individual's relative intelligence has little to do with which OS he or she ends up using. For anyone to imply otherwise is just plain stupid!
#5.5 plastikaa on 21 May 2007 - 19:16
I wasn't referring to your comment Octol
#5.6 whocares78 on 22 May 2007 - 08:23
it's more like 98% of computer users use windows, from my expierience MAC users are indeed more likely to do dodgy stuff, like not run Virus software.
#6 Express on 19 May 2007 - 21:02
I always click on those install Firefox with Google Toolbar Ad on Live Search. Never install it though.

These people advertise on Live Search and make money from Google!
#7 sundayx on 19 May 2007 - 21:06
Don't click the red button. OK *CLICKS*
(1 reply) #8 Samboini on 19 May 2007 - 21:18
It's like that classic Simpsons episode where Homer enters Lisa into the beauty pageant and on the form where it says "Do not write under this line" he puts "OK!"
#8.1 vetRitsuke on 19 May 2007 - 21:29
#9 pixels on 19 May 2007 - 21:41
That's pretty funny
#10 vetmarkjensen on 19 May 2007 - 22:11
I did. It didn't seem to do anything.
(1 reply) #11 jmc777 on 19 May 2007 - 22:45
It was probably clicked by people wanting to see if their anti-virus software would react.
#11.1 nicholas-c on 19 May 2007 - 23:44
doubt it, people are idiots
#12 K3vlar on 19 May 2007 - 22:56
Drive-By Download
Is your PC virus-free?
Get it infected here!
drive-by-download.info

Thank you for your visit!

Good fun clicking it again and again and again. I just can't get enough thanks!
(3 replies) #13 Mikee4fun on 20 May 2007 - 02:31
Click here if you are an idiot >>>>>>The Hottest Chick Ever!!!!<<<<
#13.1 Krome on 20 May 2007 - 16:31
I am not a perv freak but concerning this issue, I am so tempting to click it. Wish someone tell me what this link does.
#13.2 K3vlar on 20 May 2007 - 19:45
ROFL! Never seen that flash before! I was expecting something worse.

Just sings "YOU ARE AN IDIOT HAHAHAHAHA!" and gives you a seisure.
#13.3 whocares78 on 22 May 2007 - 08:28
i really want to click it, hmm looks like it's time to pull out my test machine, i don't care if it gets infected i will re-image it.
#14 lawtai on 20 May 2007 - 03:21
lol that's pretty clever
#15 Mikee4fun on 20 May 2007 - 04:15
hehe =P
(1 reply) #16 dl0711 on 20 May 2007 - 04:45
what google needs to do is find a way to search the ad sites every 24hrs and if it finds somthing that should not be there it gets blocked from the google ads database and a message is sent to the one who set up the account.
#16.1 whocares78 on 22 May 2007 - 08:28
and how do they decide what should and what should not be there??
(2 replies) #17 Croquant on 20 May 2007 - 04:54
Holy crap! There's STILL someone out there using IE 5.5!
#17.1 Hak Foo on 20 May 2007 - 07:24
I just had a look at the logs for my company's domain:

IE6 is still outdrawing IE7 in about a 3:2 ratio.

I also saw a trickle (about less than half a percent of IE7) with IE5.5. IE5.0 is half-again that, and IE4, a fifth of IE5.0.

Strangely, a tiny number of hits were recorded for Win95 users and users on IE2.
#17.2 whocares78 on 22 May 2007 - 08:30
wow ie2, can you even browse any webpages with ie2
#18 axious on 20 May 2007 - 05:15
Quote -
Stevens says that he designed his ad to make it look fishy, but he had no problem getting Google to accept it


If it were that "dodgy looking", and Google still accepted it, then they should be ashamed of themselves.
#19 coolman1232 on 20 May 2007 - 06:28
Image link in article is not working...
(3 replies) #20 Vegetunks on 20 May 2007 - 10:56
Bah, my girlfriends stupid brother just unleashed a few viruses onto the network, whats a few more?
UAC Repells most viruses anyway
#20.1 sin-ergy on 20 May 2007 - 15:14
Please tell me you're not referring to User Account Control feature on Vista. God, I despise that thing.
#20.2 rIaHc3 on 20 May 2007 - 21:12
Quote - (sin-ergy said @ #20.1)
Please tell me you're not referring to User Account Control feature on Vista. God, I despise that thing.

Then I hope you get viruses seeing as UAC prevents some of them like the OP just said.
#20.3 whocares78 on 22 May 2007 - 08:32
AARRRRRRRRRRRRRRRRRGGGGGGGGGGHHHHHHHHHHHHHHHHHHHHHHHHHHHH, please don't tell me your serious UAC is seriously annoying, and if u want to stop viruses you use virus protection software not UAC, only a maatter of time befoe UAC is hacked
#21 Copoboxx on 20 May 2007 - 14:01
They were probably all kids 8-13 year olds and they thought their mum set up the ad..
#22 -Hiroshi- on 20 May 2007 - 14:03
Isnt this the same concept as the big red button of doom that says "Press Me" ?
(2 replies) #23 Julius Caro on 20 May 2007 - 15:00
0.17 percent, out of 260000 people.
WOW
/irony
#23.1 =NickJ= on 20 May 2007 - 15:20
think you mean </sarcasm>
#23.2 Hak Foo on 20 May 2007 - 16:51
0.17% though is NOT out of line for a click-through rate. You'd expect a clearly malicious one to do much worse than the norm.

A really good, really well-targeted ad may get 5% click-throughs.

A typical one, 0.1 to 1%.

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.

Advertisement (Why?)