Now, researchers have uncovered one of the forces driving that spike—a consortium of 28 fake ad agencies. The consortium displayed an estimated 1 billion ad impressions last year that pushed malicious antivirus software, tech support scams, and other fraudulent schemes. By carefully developing relationships with legitimate ad platforms, the ads reached 62 percent of the Internet's ad-monetized websites on a weekly basis, researchers from security firm Confiant reported in a report published Tuesday. (Confiant has dubbed the consortium "Zirconium.") The ads were delivered on so-called "forced redirects," in which a site displaying editorial content or an ad suddenly opened a new page on a different domain.
Confiant CTO Jerome Dangu wrote the following in an email:
"These forced redirects are a technical mechanism that can be leveraged to deliver a variety of malicious attacks, from those targeting businesses (affiliation fraud), to those targeting individual users (phishing scams, malicious downloads, fake updates etc.)... At a minimum, these forced redirects often make a website unusable for an everyday user, [and] at worse [visitors] are being directly attacked. People need to understand where the issues are coming from (often the website owner gets blamed, even as they themselves are a victim, too) and what the new risks are for them in an ad supported Internet."
Confiant said that most of the fake ad agencies have their own websites, Twitter accounts, and executive profiles on LinkedIn. One such agency called out in the report is known as Grandonmedia, whose website urges visitors to "Buy Website Traffic visitors to our loyal customers!" The Facebook profile for its CEO displays what appears to be a stock business photo, as did an earlier version of the CEO's LinkedIn profile.
The agencies also rely on machine-generated content posted from its accounts on Facebook and Twitter. Grandonmedia bots issued content including "Lasting relations with reliable partner is the key to success in online marketing" and "Do you want to involve on your online profits? Don't hesitate to get in touch." Grandomedia officials didn't respond to messages seeking comment for this post.