Ad Situation Guide

Thread replies: 15
Thread images: 4

Anonymous
Ad Situation Guide 2016-03-13 18:32:42 Post No. 466891
[Report] Image search: [Google]

File: 1449318421175.png (10 KB, 128x128) Image search: [Google]

Ad Situation Guide Anonymous 2016-03-13 18:32:42 Post No. 466891 [Report]

1. Information

>What is happening?
Our admin is testing new ad services on the homepage, related pages and archived threads. Some users reported redirects to malicious websites.

>Facts
- The ads in question are served from hxxp://ecpmrocks.com, which allows injecting its own Javascript and is able to redirect and hijack browsers. The script tries to read HTML5 localstorage cookies. The official ad host is Epom Market LTD.
- Traditional ads are served by hxxp://zkcdn.net, which only serves images.

>Unconfirmed rumors
- ECPM may be a legit ad hosting service. However, a simple Google search leads to questionable results, since hackers can inject and distribute malicious scripts.
- Board ads may be infected. The distributor is not injecting scripts, it should be harmless.
- Infected downloads are happening.

>Current Situation
Servers are sometimes changing; the frontpage may serve ads from hxxp://bnhtml.com. Said ads are still running scripts.

2. Prevention/Security

>Browsers/Extensions
- For enhanced security, it's generally recommended to use a browser that supports extensions. Examples include: Firefox, Chrome.

>Competent ad/script blocking extensions:
- uBlock Origin: https://github.com/gorhill/uBlock#installation
An ad blocker that uses a simple point-and-click firewall. You can decide what gets blocked or what goes through. https://github.com/gorhill/uBlock/wiki/Dynamic-filtering:-quick-guide
You may want to whitelist the following: @@||4chan.org @@||4cdn.org
- uMatrix: https://github.com/gorhill/uMatrix#umatrix
Matrix filter. Block scripts, frames and more. https://github.com/gorhill/uMatrix/wiki
- NoScript, ScriptSafe: Scriptblockers.

>Software
You should always use antivirus software.
If you are infected: Look for tools like MalwarebytesAntiMalware. Ask for help on malware support forums.

3. Actions

>Contact the administration
https://www.4chan.org/feedback

>Inform others
If you know any users that post on 4chan, please link them to this thread.

>>

Anonymous 2016-03-13 18:46:09 Post No.466900
[Report] Image search: [Google]

Anonymous 2016-03-13 18:46:09 Post No.466900 [Report]

File: 1447862590056.jpg (41 KB, 360x360) Image search: [Google]

41 KB, 360x360

>>466891
KEEP ME POSTED

>>

Anonymous 2016-03-13 20:11:50 Post No.466938
[Report]

Anonymous 2016-03-13 20:11:50 Post No.466938 [Report]

That reminds me malware adbro

What the fuck is zkcdn.net and how have I not noticed it for a whole year now? People first started seeing it last February in NoScript apparently.

I know it has "something" to do with an advertiser called Adzerk, but I don't know what its connection is with the whole malware thing.
Is there any?

>>

Anonymous 2016-03-13 20:48:42 Post No.466950
[Report]

Anonymous 2016-03-13 20:48:42 Post No.466950 [Report]

>>466891

I think I'm just going to start blocking ads on 4chan.
Hiro clearly isnt looking out for us, so we dont need to bother looking out for him.

>>

Anonymous 2016-03-13 21:00:26 Post No.466958
[Report]

Anonymous 2016-03-13 21:00:26 Post No.466958 [Report]

>>466950
>not blocking ads everywhere all the time
I can't stand that people still do this and prop up the failed 1990s clickthrough business model.

>>

Anonymous 2016-03-13 21:03:12 Post No.466959
[Report]

Anonymous 2016-03-13 21:03:12 Post No.466959 [Report]

>>466891
Hi 8gag!

>>

Anonymous 2016-03-13 21:29:21 Post No.466974
[Report]

Anonymous 2016-03-13 21:29:21 Post No.466974 [Report]

>>466958
For the longest time 4chan has had not terrible ads. It wasn't until the chinese menace came that advertisements started giving malware.

>>

Anonymous 2016-03-14 22:30:49 Post No.467711
[Report]

Anonymous 2016-03-14 22:30:49 Post No.467711 [Report]

>Infected downloads are happening.
fug

>>

Anonymous 2016-03-14 23:12:52 Post No.467747
[Report]

Anonymous 2016-03-14 23:12:52 Post No.467747 [Report]

>>467711
>>466891
Wait, does that mean downloads as in whenever I save a pic from 4chan?

>>

Anonymous 2016-03-14 23:16:03 Post No.467750
[Report]

Anonymous 2016-03-14 23:16:03 Post No.467750 [Report]

>>467747
its just a rumor bro its just a rumor

>>

Anonymous 2016-03-15 01:19:59 Post No.467824
[Report]

Anonymous 2016-03-15 01:19:59 Post No.467824 [Report]

>>467747
No. "Malware" ads are only present in the front page and in the archives. "Malware" because they aren't really malwares, they are just redirectors.

>>

Anonymous 2016-03-15 06:15:35 Post No.468046
[Report] Image search: [Google]

Anonymous 2016-03-15 06:15:35 Post No.468046 [Report]

File: 1458022534996.jpg (66 KB, 299x249) Image search: [Google]

66 KB, 299x249

>not having your Adblock on all the time in the age of malvertising.

Shiggy diggy

>>

Anonymous 2016-03-15 14:15:48 Post No.468337
[Report]

Anonymous 2016-03-15 14:15:48 Post No.468337 [Report]

Bump frum train.

>>

Anonymous 2016-03-17 12:41:09 Post No.470186
[Report] Image search: [Google]

Anonymous 2016-03-17 12:41:09 Post No.470186 [Report]

File: 1458201432542[1].jpg (8 KB, 210x251) Image search: [Google]

8 KB, 210x251

Why hasn't anyone really made a big deal about this? It's a pretty big change, and having a video front and centre every time I visit an archive link seems far more intrusive than what I've come to expect

Was there a shitstorm I missed or something?

>>

Anonymous 2016-03-17 12:41:49 Post No.470187
[Report]

Anonymous 2016-03-17 12:41:49 Post No.470187 [Report]

How do I get these ads to show up?