Tuesday, October 5, 2010

Malvertising: Cybercriminals' Latest Form of ID Theft

The term "malware," derived from "malicious software," refers to any software specifically designed to harm a computer or the software it's running. Because malware can potentially steal sensitive information like credit card numbers or passwords from your computer, send fake emails from your email account, and more, it is often referred to as "crimeware." And the hackers who create and/or send them are known as cybercriminals.

Malware can be installed on any desktop, laptop, or notebook computer, with or without your knowledge, in a number of ways — usually when you visit a contaminated website, download seemingly innocent software, or send sympathetic warnings and alerts.

Malvertising = Malware + Advertising

Now, some cybercriminals are using advertising to distribute their malware. Possible vectors of attack include malicious code hidden within an ad creative (such as a swf file), embedded on a webpage, or within software downloads. That's why I'm so extremely passionate about NOT sending Comments "to everyone on your list", a phrase often used by the hackers to help them spread their malware.

Ad networks vary in their responses to malvertising incidents. At Google, the Anti-Malware Team studies malware distribution and works closely with the security community to identify crimeware on the web and share that information more broadly. This stems directly from Google's security philosophy: "We believe that if we all work together to identify threats and stamp them out, we can make the web a safer place for everyone."

Google is doing its part to make our online experience a safer one. Let's do the same for ourselves, our families, and our businesses.