{"id":1049,"date":"2015-02-08T18:41:51","date_gmt":"2015-02-08T18:41:51","guid":{"rendered":"http:\/\/blogs.secure-bits.com\/?p=1049"},"modified":"2015-03-01T15:06:49","modified_gmt":"2015-03-01T15:06:49","slug":"the-cost-of-malvertisement","status":"publish","type":"post","link":"https:\/\/blogs.secure-bits.com\/?p=1049","title":{"rendered":"The cost of malvertisement…"},"content":{"rendered":"

In the previous blog<\/a>, we’ve looked at how malvertisement may affect you and what you can do to protect your system(s) against this threat vector. In today’s blog, we’ll look at the actual distribution channels and the cost for displaying malvertisement.<\/p>\n

Beyond the advertisement shown in your browser, there’s a well established business model that isn’t that much different from any other business models.<\/p>\n

\"Distribution<\/a>The picture on the left shows the typical business model. Basically the products are created (including malvertisement), sold to distributers, who in return make them available to consumers.<\/p>\n

The difference is how other distribution channels are regulated and the requirements are enforced by various government agencies. You’d had hard time in the U.S.\u00a0purchasing food at your supermarket, without FDA approval, buy a car\u00a0without NHTSA approval, etc.<\/p>\n

Unfortunately, the online advertisements are loosely regulated, with minimal, or no enforcement whatsoever. There’s no need for approval by the website or the advertisement network. They will pretty much blindly refer your browser to the site, where the actual ad is hosted. The actual site could be hacked\u00a0websites, hosted servers, etc.<\/p>\n

Hackers had discovered that they can just bid to display their ads at various sites. Since\u00a0anyone can bid to display their ads, including the maximum price per displaying the ad, this is an easy way to have the malware distributed by reputable websites. The hackers’ malware incorporated in an ad (we call malvertisement), they bid to display their ad at targeted websites, and\u00a0the advertiser network kicks in. When you visit the targeted websites, the ad becomes part of the website’s content, any script in the ad executed by your browser without you clicking on it. You probably recall a few websites that\u00a0had some music and\/or video already playing just by visiting their home page. This is the type of ad delivery that hackers use to load\u00a0malware\u00a0on to your system.<\/p>\n

The process described is automated to the level that the chances are no humans evaluate the actual ad during this process. As such, malware is distributed without any warning. The sole exception might be your system protection that should stop the malware execution.<\/p>\n

So, what is the actual cost for the hackers to display their ads? That depends on the website, where the ads are displayed. Malwarebytes blog<\/a> states $0.927 per displayed ad with current malvertisement at the following websites:<\/p>\n