Major sites including New York Times and BBC hit by 'ransomware' malvertising

Re:Major sites including New York Times and BBC hit by 'rans... by mdip on Wednesday March 16, 2016 @11:07AM (#11297891)

Sadly, I've always considered adblocking software a form of security software rather than a mere convenience. Years ago I had to remove a mess of malware from my parent's PC due to a malvertisement received via MSN[1]. Since that point I've installed privoxy and uBlock Origin or similar on all PCs that I am asked to help with.

Despite all of the talk about "blocking the ad blockers", I've yet to receive a phone call from anyone saying this or another web site didn't work, "Can you fix it?" I'm guessing their usage is limited enough that they don't encounter it (my dad does visit Forbes, but I haven't heard complaints).

There's no way I'd surf the internet these days without ad blocking enabled and I rarely white-list sites out of concern for my data. It's becoming as important as personal firewalls / antivirus once were.

[1] There was a brief period during the time that they received the malware that MSN had been hit by malvertizing and they had that as their homepage, but it could have come from elsewhere. The bottom line was that there were no sites in the riskier categories that were in their browsing history and my parent's proficiency does not include a good understanding of "incognito browsing".

[ Parent | on HN ]

Re:Major sites including New York Times and BBC hit by 'rans... by jlarocco on Wednesday March 16, 2016 @01:16PM (#11298963)

uBlock Origin, or some of its filters, can block whatever mechanism sites use to detect blocking.

A while back I had a few sites warn me about ad-block, but I haven't seen it in a while.

[ Parent | on HN ]

Re:Major sites including New York Times and BBC hit by 'rans... by mdip on Wednesday March 16, 2016 @08:10PM (#11301702)

I just switched back to that, actually. Months ago, my default browser was Firefox Developer Edition and uBlock Origin had a bug related to LastPass that caused LastPass to hang the browser so I had switched to ABP.

Unfortunately, LastPass started acting up in FireFox a few weeks ago and I decided to give in to Chrome, again, so I've happily returned to uBO.

I go back and forth on which to install for people that routinely come to me for help (I'm a developer, not a helpdesk, dammit!). I'm not sure if it's still the case, but months ago I actually did receive a call from my father when he attempted to install an open-source PDF creation tool that he uses at work on his home PC. It was hosted by SourceForge which uBlock had large swaths of in its blacklist. The installer did contain a bull$#*+ toolbar (several, actually), but he's familiar with avoiding crapware directly placed within installers (and to avoid "Express Installations").

[ Parent | on HN ]

Re:Major sites including New York Times and BBC hit by 'rans... by euyyn on Wednesday March 16, 2016 @06:56PM (#11301323)

> I've yet to receive a phone call from anyone saying this or another web site didn't work, "Can you fix it?"

Doesn't mean it's not happening. Maybe people assume the specific page is just broken.

[ Parent | on HN ]

Re:Major sites including New York Times and BBC hit by 'rans... by mdip on Wednesday March 16, 2016 @07:56PM (#11301628)

Exactly.

I'll get a phone call every time when a piece of crapware causes videos to play on Google's normally spartan search page, or ransomware is asking for "... something called a 'Bitcoin'? I don't remember installing a 'Bitcoin'."

They don't bother calling when one of the thirty places they get news from stops working.

[ Parent | on HN ]