354
submitted 11 months ago by Bebo@literature.cafe to c/technology@lemmy.world

An investigative report reveals that new spyware can slip in unseen through online ads—and there is currently no defense against it. So not only that online ads are intrusive and can infect devices through malware, they can also be used for spying.

all 42 comments
sorted by: hot top controversial new old
[-] GreenEngineering3475@lemmy.world 121 points 11 months ago

An adblocker in this day and time is must for internet usage.

[-] hellequin67@lemm.ee 33 points 11 months ago

Or offload them at the DNS so they dont even get to the device in the first instance.

[-] Geek_King@lemmy.world 40 points 11 months ago

I do so love my Pihole. I forget how many ads are all over websites until I load up some site on a machine outside of my network.

[-] GreenEngineering3475@lemmy.world 5 points 11 months ago

I use(and recommend) both for the best user experience.UBlock origin's element zapper feature has changed my life.

[-] teft@startrek.website 88 points 11 months ago* (last edited 11 months ago)

and there is currently no defense against it.

Don't load ads. There, problem solved.

[-] Mrduckrocks@lemmy.world 33 points 11 months ago

I swear 90% of the world not aware of adblocker.

[-] micka190@lemmy.world 9 points 11 months ago

And then 9% out of that remaining 10% just can't be bothered to install them for some insane reason.

[-] Bebo@literature.cafe 3 points 11 months ago

Exactly! Can't understand how do so many people tolerate ads.

[-] MrFlamey@lemmy.world 1 points 11 months ago

I think I heard that usage on desktop is something like 1 in 4, which is pretty good. Mobile is another world altogether, since it requires different browsers that support adblocking and then accessing websites through the browser instead of the app for the website, which many users would definitely prefer to use.

[-] n3cr0@lemmy.world 61 points 11 months ago

There is no defense?

Imagine a world without Adblocker, haha!

[-] charonn0@startrek.website 54 points 11 months ago

The FBI recommends using an ad blocker for precisely this reason.

[-] aceshigh@lemmy.world 17 points 11 months ago

And then companies like YouTube force you to unblock them.

[-] Buddahriffic@lemmy.world 6 points 11 months ago

What? YouTube can't force me to do shit.

[-] HurlingDurling@lemm.ee 6 points 11 months ago

They have blocked users in the past from seeing any videos until their adblocker it removed

[-] Buddahriffic@lemmy.world 17 points 11 months ago

You still have the option of closing the tab and moving on with life, or digging in to see if there's another way around it.

[-] MrFlamey@lemmy.world 5 points 11 months ago

Closing the tab and moving on with life is what I do when a Twitter login prompt or paywall appears. I've often thought it would be better for me to unblock ads, at least on timewasting sites like Youtube, just so that I get pissed off by the ads and close the tab, making it easier to stop wasting time.

[-] Bebo@literature.cafe 1 points 11 months ago

I had been watching youtube on my phone using ublock origin on Firefox, but since youtube started this shit I have shifted permanently to newpipe.

[-] plz1@lemmy.world 27 points 11 months ago

Defense against it

  • uBlock Origin
  • NextDNS (I highly recommend this to everyone because you can easily get it for mobile devices and block ads served over mobile networks)
  • PiHole
  • Plenty of other options

But if corporate media reported on ways to block ads, it'd eat into their own bottom line, so I can understand their choice to skirt the whole "ads are blockable with some level of effort" conversation.

I've been blocking online ads for nearly the entirety of my multi-decade usage of the internet, to the point where seeing them now is actually quite jarring. The fact that they're now a prime vector for malware and spyware/capitalist surveillance just one-ups the decision to block them just for the annoyance factor.

[-] FluffyPotato@lemm.ee 21 points 11 months ago

Yea, that's not new. Malware in ads has been around for like a decade. None of the major ad providers have given zero fucks about it so an ad blocker is mandatory and with Google trying to make ad blocking harder to impossible it's only a matter of time until some major issues with this malware happens.

[-] Bebo@literature.cafe 1 points 11 months ago* (last edited 11 months ago)

But now they being used for targeting devices by Spyware! Another reason to hate ads.

[-] Alkatane@lemmy.world 12 points 11 months ago

AdGuard DNS for android :)

[-] Bebo@literature.cafe 5 points 11 months ago

Yes! And ublock origin on Firefox. And I use newpipe with sponsor block for youtube. Not seen an ad in ages. Ads are a cybersecurity threat no doubt.

[-] Alkatane@lemmy.world 1 points 11 months ago

For YouTube, I use ReVanced Extended, it has Sponsor Block, Return Dislikes Back and an Ad Block. (Btw it's a fork of a fork)

[-] Bebo@literature.cafe 2 points 11 months ago

Honestly, setting up revanced seems a little too much work to me. So I use newpipe which I find much easier to set up.

[-] Alkatane@lemmy.world 1 points 11 months ago

Did you trying using the default patches?

[-] Bebo@literature.cafe 1 points 11 months ago

Fact is, I am lazy. Reading the long list of things to do to patch the app and to keep it updated put me off so I didn't try.

[-] Alkatane@lemmy.world 1 points 11 months ago
[-] Bebo@literature.cafe 1 points 11 months ago

Yes, I read the instructions for patching the app.

[-] Alkatane@lemmy.world 1 points 11 months ago

Oh, I thought the patches list

[-] bjoern_tantau@swg-empire.de 10 points 11 months ago* (last edited 11 months ago)

~~This is using some vulnerability in iOS. I'm an Android and Linux guy, but let's hope Apple quickly finds the bug and fixes it.~~ And fuck that agency for not alerting Apple and instead profiting from it. And fuck the Israeli government for enabling them.

Edit: I misread, supposedly this is miraculously able to target every device.

[-] madsen@lemmy.world 6 points 11 months ago* (last edited 11 months ago)

From the article:

What sets Insanet’s Sherlock apart from Pegasus is its exploitation of ad networks rather than vulnerabilities in phones. A Sherlock user creates an ad campaign that narrowly focuses on the target’s demographic and location, and places a spyware-laden ad with an ad exchange. Once the ad is served to a web page that the target views, the spyware is secretly installed on the target’s phone or computer.

If they're using ads on a web page to install spyware, then they're most definitely exploiting vulnerabilities—unless they're showing the user a 'do you want to install XYZ?', in which case this isn't newsworthy at all. Ads aren't some magical thing that can just go around installing shit silently, so I don't know wtf the article is going on about, but it doesn't make sense.

Edit: The Register seems to have a more sensible take on it: https://www.theregister.com/2023/09/16/insanet_spyware/

[-] gregorum@lemm.ee 3 points 11 months ago* (last edited 11 months ago)

Apple released an update day before yesterday, and another today.

[-] sebinspace@lemmy.world 4 points 11 months ago

Unity also purchased a company last year that was notorious for turning a blind eye to malvertisers

[-] Treczoks@lemmy.world 4 points 11 months ago

And still websites are pissed that I block ads. Websites, the adblocker is not there to annoy you, it is there to protect me from your foolishness and lazyness when it comes to weed out bad actors.

[-] Bebo@literature.cafe 2 points 11 months ago

And when websites demand I turn off the adblocker, I just close it.

this post was submitted on 27 Sep 2023
354 points (96.8% liked)

Technology

58137 readers
2185 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS