Belgian Government Suspected Of Using FinFisher Spyware

The Belgian government is suspected of also using this year to have the controversial FinFisher spyware made. According to a new report published by the Canadian Citizen Lab, an organization dealing with human rights, security and IT.

The reason Citizen Lab with FinFisher concerned that some regimes used these spyware in the past, journalists and spy on law firms. FinFisher is being developed by International Gamma and consists of client software, which must be installed on the computer of a target, and server software. Via the server, which is installed on the server of the relevant government authorities, FinFisher the infected computer can be spied upon. In order to infect other computers, for example, be deployed counterfeit websites from Adobe.

Citizen Lab researchers were able to locate several of the FinFisher servers. On the basis of the IP addresses has drawn up a list of countries that are suspected FinFisher this year to have used it. As would have been operating a Belgian FinFisher server in January this year. In Europe, including Spain, Italy and the Czech Republic use the software. In total, 32 countries were identified. Last year the Belgian Government had already known that the vendor FinFisher 18,000 euros paid.

Google Receives Complaints About 300.000 Injected Ads

Since the beginning of this year, Google has received more than 300,000 complaints of Chrome users on injected ads. It is the largest source of annoyance for Chrome users. The injected ads come from so-called "ad injectors".

This relates to adware or browser extensions that inject additional ads on random websites or replace existing ads. According to Google ad injectors are a problem for advertisers and websites. Advertisers do not know that their ads be injected and so have no idea where their ads are displayed. Websites are not, however, paid for these ads because they are injected locally on the users' computers. The content sometimes dubious, it may involve malware, making the injected ads are a risk to visitors. This is negative for the image of the website, which can do nothing to the injected ads.

Filter

To have to tackle Google ad injectors for several measures taken. Since July, the Internet giant has also begun to filter injected ads of its own advertising platform DoubleClick. Google allows advertisers DoubleClick Bid Manager, which can be bid on ad space. To prevent injected advertisers buy ad space, there is now an automatic filter active.

This new system will detect injected ads and proactively establishes a blacklist that prevents advertisers to bid on ad space injected. Google expects that this measure will not immediately solve the problem, but it hopes that other parties in the advertising industry will take action against ad injectors. "Progress can be achieved only if we work together," said Vegard Johnsen, product manager of Google Ads.

AT & T Hotspots Inject Ads Into Wi-Fi Traffic

Hotspots of US telco AT & T inject ads into the Wi-Fi traffic from users, so has researcher Jonathan Mayer discovered. Mayer was recently at Dulles airport and made ​​to connect to a hotspot free of AT & T.

The websites he had visited suddenly all sorts of ads in locations where they do not belong. It was not long before Mayer discovered that the wifi hotspot AT & T HTTP traffic manipulated. The telecom provider uses an ad-injection platform developed by a startup called RaGaPa. When an HTML page is loaded over HTTP are made three changes.

If the ad is inserted, and a second advertisement as a backup in case the browser does not support JavaScript. Finally scripts are added for loading and displaying the ads. By injecting advertisements users of the browsing behavior will be exposed to unknown and unreliable companies, writes the researcher.

In addition, also affected the names and content of enterprises, because the ads appear on various websites that normally show ads. It is also not clear that the ads come from the hotspot. Furthermore, it introduces security risks, says Mayer. He calls AT & T also to stop. Furthermore it shows, according to the researcher that it is important that websites are accessible only over HTTPS, since no ads will be injected into the circulation.

Google's Tougher Action Against Unwanted Software

Google Chrome users in the coming weeks will see more warnings from the browser get that warn against unwanted software. Programs that are undesirable in Internet hijack the browser and then inject all kinds of ads are a gigantic problem, as shown by previous research by Google and the University of California.

The researchers wanted to know how big the problem of "ad injectors" actually was. This is software that injects ads on websites or existing ads replace.Google had in the first few months of this year, more than 100,000 complaints received ad injectors. During the investigation it was found that 5.5% of all IP addresses that Google sites visits with one or more ad injectors infected. In total, the researchers discovered more than 85,000 applications that hijack the browser and inject ads.

Detection

The detection of Google has been improved to detect this type of unwanted software, making short-term Chrome users more warnings will be given. "The mandate remains unchanged," says Stephan Somogyi from the Google Safe Browsing team. "We focus only on protecting users from malware, phishing, unwanted software, and similar evil. You will see a warning SafeBrowsing not get another reason to see."

According Somogyi unwanted software is distributed through a variety of ways, including the above-mentioned ad injectors. In many cases, Google's Safe Browsing technology is the last layer of defense, commented Google employee. Besides Safari and Firefox, Chrome also make use of Google's Safe Browsing technology.

Google Finds 85,000 Programs That Inject Ads

Programs that are undesirable in Internet hijack the browser and then inject all kinds of ads are a gigantic problem, according to research from Google and the University of California. The researchers wanted to know how big the problem of "ad injectors" actually is. This is software that injects ads on websites or replace existing ads.

Google had in the first few months of this year, more than 100,000 complaints received ad injectors. During the investigation it was found that 5.5% of all IP addresses that Google sites visits with one or more ad injectors infected. In total, the researchers discovered more than 85,000 applications that hijack the browser and inject ads. It involved nearly 51,000 extensions for Google Chrome and more than 34,000 Windows programs. Of that total, 38% and 17% malware that also made the booty credentials in the browser.

The extensions and programs appear to have been made by a small group of software developers who control most ad injectors, which in turn benefit from the advertising ecosystem. The extensions and programs are distributed through a network of partners who are trying to create installations as much as possible, by combining the programs with popular downloads, use malware to spread or apply marketing.

According to Google would be more than 3,000 advertisers, the ad injectors have been duped. The advertisers can often only the last click that ensures that traffic is on their side, but often do not know how this movement came about. So they do not know that traffic comes from unwanted software and malware, but must still pay for here. Google has already removed 192 Chrome extensions from the Chrome Web Store, added measures to protect users from ad injectors and also warned the advertisers who are the victims of ad injectors.