{"id":266,"date":"2006-06-24T20:46:50","date_gmt":"2006-06-24T20:46:50","guid":{"rendered":"https:\/\/www.darknet.org.uk\/2006\/06\/livejournal-advert-installs-malware\/"},"modified":"2015-09-09T19:43:51","modified_gmt":"2015-09-09T11:43:51","slug":"livejournal-advert-installs-malware","status":"publish","type":"post","link":"https:\/\/www.darknet.org.uk\/2006\/06\/livejournal-advert-installs-malware\/","title":{"rendered":"LiveJournal Advert Installs Malware"},"content":{"rendered":"<p>[ad]<\/p>\n<p>Seems like someone sneaked past the LiverJournal advertisers policy by only trying to infect Australian and European users.<\/p>\n<p>A certain advertiser (kpremium.com) &#8211; being sneaky and underhanded. It&#8217;s not LJ&#8217;s fault, LJ already disabled the advert from rotation.<\/p>\n<blockquote><p>The ad itself is for a program that lets you download stuff &#8211; you know the sort of thing. The ad is a Flash ad, and masquerades as a banner ad.<\/p>\n<p>Thing is, the Flash ad contains code to open a popup that leads to a very different destination &#8211; it&#8217;s what I assume is an affiliate link that attempts to download and install <a href=\"http:\/\/www.symantec.com\/avcenter\/venc\/data\/errorsafe.html\">ErrorSafe<\/a> on your computer.<\/p><\/blockquote>\n<p>Source: <a href=\"http:\/\/community.livejournal.com\/no_lj_ads\/23797.html\">no_lj_ads<\/a><\/p>\n<p>LJ have said they are looking into it.<\/p>\n<blockquote><p>It looks like one of our advertisers possibly managed to sneak past our ad guidelines. The kpremium ad is designed and targeted for people in Western Europe and Australia, and we&#8217;ve received reports from people in those regions, indicating that it&#8217;s doing obnoxious things with the browsers &#8212; shrinking the window and generating popups. (Many people mentioned &#8220;ErrorSafe&#8221; in<\/p><\/blockquote>\n<p>Source: <a href=\"http:\/\/community.livejournal.com\/lj_ads\/4176.html\">lj_ads<\/a><\/p>\n<p>Sneaky eh, all the more reason to use Firefox, Adblock Plus and NoScript!<\/p>\n<p><!--adsense#New468--><\/p>\n<p>Also keep your anti-virus software up to date just in case.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>[ad] Seems like someone sneaked past the LiverJournal advertisers policy by only trying to infect Australian and European users. A certain advertiser (kpremium.com) &#8211; being sneaky and underhanded. It&#8217;s not LJ&#8217;s fault, LJ already disabled the advert from rotation. The ad itself is for a program that lets you download stuff &#8211; you know the [&hellip;]<\/p>\n","protected":false},"author":25,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_seopress_robots_primary_cat":"","_seopress_titles_title":"","_seopress_titles_desc":"","_seopress_robots_index":"","_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","footnotes":""},"categories":[7,15],"tags":[38,37,142,112],"featured_image_src":null,"featured_image_src_square":null,"author_info":{"display_name":"Darknet","author_link":"https:\/\/www.darknet.org.uk\/author\/darknet\/"},"_links":{"self":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/266"}],"collection":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/users\/25"}],"replies":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/comments?post=266"}],"version-history":[{"count":0,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/266\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/media?parent=266"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/categories?post=266"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/tags?post=266"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}