Fake Microsoft Security Essentials popup on Neowin

[Steven P. Administrators]

Please see here for examples: https://www.neowin.net/forum/topic/1164064-adsscript-redirecting-to-virus-site/

 

We have reported this to our advertiser, and hope it is taken care of quickly. It sucks that this rogue advertiser somehow got through.

 

In the meantime, if you see it, please close it and do not allow it to "clean your computer".

 

Thanks.

[articuno1au]

May I suggest this should be on the front page until it's fixed?

 

I don't think it reflects badly on the site unless you fail to deal with it >.<

[cork1958]

May I suggest this should be on the front page until it's fixed?

 

I don't think it reflects badly on the site unless you fail to deal with it >.<

Whoa!!

 

Couldn't agree more!!

[articuno1au]

Outstanding.

[Kalint]

What's the actual issue here?  I clicked on that link and paid $1,000 to get those viruses removed.  My PC is probably cleaner than yours now!

[heatlesssun]

Thanks for taking care of this. I came across this the other day, just closed it out and didn't think much of it at the time.

[SecretAgentMan]

Still happening as of 5:40 CST.

[Leopard Seal]

Still happening as of 5:40 CST.

Yep, just happened to me 3:40 pm PST. Fortunately I'm browsing on my Surface RT :)

[HawkMan]

Honestly, if you know you have rogue ads that can infect visitors computers through you ad system, you should probably disable the whole ad system until the ad provider has solved the issue. Instead of posting a random post on a thread on the forum that you shouldn't click the link if it comes up for you... it's about professionalism and respect for your "clients"

[123456789A]

This is more worrisome to me than the NSA or DRM.

[Marshall Veteran]

This is one of the ads in question:

 

 

When trying to log-in it threw up a red flag on Eset and gave me this URL as the malicious culprit...

http://www.googleadservices.com/pagead/aclk?sa=L&ai=CYSXzgeXhUZHRKsuqqAGixYDYDLnzkrYD4ZaLkWjAjbcBEAEg5c_rFlDn86ORBGDJ1tCI-KOcFaABn6SP2QPIAQLgAgCoAwGqBLEBT9DqMgO7sxui4ZO7ocdV-2SpLOdWAxPVmdYPFRoq6TB2XceFkWUh5g1Oy5pRc1dBK0M0GVm7jeUvL2cj16SrXRCY6XpHdnaNc3_jA4bmHBFD8Y_Tw07A8KJjjzBzfCWeMOdkYUF4gcPSO_2b-xNq23I6MveeUaPh1L1Mec5ihxd-oxMl_2r_vk0Z0r_I1j5OahrL3zZh_GsYZ8_PrHxUT5cupkL2gnX110ZM8q--h-Uv4AQBiAYBoAYCgAfJ2_Am&num=1&cid=5Gi4zmqLoGHO3zrT4wMLzRS0&sig=AOD64_2nnSrMi83okzb_JkaXsImEnjIo8w&client=ca-pub-9914992914910847&adurl=http://www.newzipopenerfun.com/gb/sabl/?adnm=27874615985&i=s&grid=Black&lg=EN&cc=US&clg=en&c=1&d=0&cid=_585695321&kw=software&mt=&mn=www.neowin.net&ct=&nt=D&expr=&ap=none&dv=c&color=black&agid=_5831036468

[Tech Geek Alex]

That rogue ad isn't just here. I've come across this fake ad on a number of other sites that use AdChoices as their ad system

[Noir Angel]

About time the groups responsible for producing advertising started to properly vet ads placed through their systems tbh. The sites that people get infected by often get blamed when it's someone else's fault.

[soldier1st]

What's the actual issue here?  I clicked on that link and paid $1,000 to get those viruses removed.  My PC is probably cleaner than yours now!

Are you on something to say that?

[fjh]

It is still on your website.  It popped up on me on 7/13/2013 at 6:47pm. 

[JJ_]

It's a good job I have AB+ with ALL ads disabled. This proves even 'safe' sites are vulnerable, even although Neowin has no direct control over which ads get displayed or not.

[Mockingbird]

Yup. I've just seen it.

[Steven P. Administrators]

I've removed the top ad completely now on main and forums until I get support for this.

[articuno1au]

24 hours on the dot.

 

Good call on taking to down though..

 

EDIT::
Best part is this, you could have pulled down the ad (still can) and posted on the front page explaining what was going on with something along the following lines: "And if you like the way Neowin looks ad-free, consider purchasing a subscription. In the meantime, we'll keep the ads locked up to keep you safe".

 

Karma + Infinity

[Steven P. Administrators]

24 hours on the dot.

 

Good call on taking to down though..

 

EDIT::

Best part is this, you could have pulled down the ad (still can) and posted on the front page explaining what was going on with something along the following lines: "And if you like the way Neowin looks ad-free, consider purchasing a subscription. In the meantime, we'll keep the ads locked up to keep you safe".

 

Karma + Infinity

I see what you're saying but usually my ad provider has a very quick turnaround for issues like these, so I don't think it's a good idea to scaremonger on the front page for what could be a limited amount of people affected.

 

If the intention was to harm on Neowin then I doubt the advertiser paid a lot of money for ad views. The publicity it would create by posting on main gets the required intent doesn't it?

 

I prefer a takedown rather than publicizing the fact even more.

[articuno1au]

Eh, not suggesting you post something like "ZOMG VIRUS", but rather: "We've had some issues with our ads, so in the meantime, we've taken them down. If you like the look of our site without ads" blah blah.

 

Don't even need to tell people why they've been taken down. The people with two braincells will piece it together >.<

 

Either way, (obviously) entirely your call. Just how I'd have approached it. Also, I do agree you guys normally get good turn around times from the ad guys, so made your position pretty difficult >.<

 

I just can't believe how poor the checking on the ad service is O.o

[Vykranth]

It pains to say it but I would have probably fallen for the deception. That things looks genuine.

 

It is really a shame that sites like Neowin are at the mercy of rogue advertisers that want to put crap/malware on people computers ...

[Steven P. Administrators]

It pains to say it but I would have probably fallen for the deception. That things looks genuine.

 

It is really a shame that sites like Neowin are at the mercy of rogue advertisers that want to put crap/malware on people computers ...

Just want to point out that it isn't the advertiser, if someone pays to display ads on Neowin then they will be accepted if they aren't on a known blacklist.

 

I'm going to guess that this ad is probably not a company, but a single person who paid money to display a rogue ad on Neowin just like I could on another site if I wanted to.

 

BTW I did post something on @NeowinFeed yesterday about it. I just don't feel that this is main page worthy. It draws unnecessary attention to it, which is what the person wants.

[Hum]

Why didn't all members see this ad ?  I didn't.

 

No ad blockers.

 

Latest Firefox & MSE running.

[bankajac]

I just got the fake essentials popup this morning of the 14th.  Please fix.