{"id":12777,"date":"2018-07-11T11:10:05","date_gmt":"2018-07-11T19:10:05","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2018\/07\/11\/news-6545\/"},"modified":"2018-07-11T11:10:05","modified_gmt":"2018-07-11T19:10:05","slug":"news-6545","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2018\/07\/11\/news-6545\/","title":{"rendered":"We block shady ad blockers"},"content":{"rendered":"<p><strong>Credit to Author: Malwarebytes Labs| Date: Wed, 11 Jul 2018 18:15:23 +0000<\/strong><\/p>\n<p>Some of you have reached out to us concerning Malwarebytes blocking of certain ad blocking extensions, or an influx in web blocking notifications. First things first, this is not a False Positive.\u00a0<a href=\"https:\/\/adguard.com\/en\/blog\/over-20-000-000-of-chrome-users-are-victims-of-fake-ad-blockers\/\" target=\"_blank\" rel=\"noopener\">Recently in their blog, AdGuard discovered<\/a> that numerous malicious ad blocking extensions were found in the Google Chrome store. According to an <a href=\"https:\/\/www.zdnet.com\/article\/google-cuts-fake-ad-blockers-from-chrome-store-were-you-among-20-million-fooled\/\" target=\"_blank\" rel=\"noopener\">article by ZDNet<\/a>, the malicious extensions have since been removed from the store, however, 20 million devices are estimated to have downloaded these apps while they were still online, you might own one of those devices.<\/p>\n<p>The extensions are used to basically turn the browser into a zombie under the control of a remote attacker, essentially adding your device to a Botnet. Since we are limited in our ability to remove extensions completely, we are blocking the domains the malicious extensions reach out to, so at the very least, users will not have their systems controlled by cybercriminal.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" data-attachment-id=\"24586\" data-permalink=\"https:\/\/blog.malwarebytes.com\/cybercrime\/2018\/07\/we-block-shady-ad-blockers\/attachment\/adblock\/\" data-orig-file=\"https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2018\/07\/adblock.png\" data-orig-size=\"496,332\" data-comments-opened=\"1\" data-image-meta=\"{&quot;aperture&quot;:&quot;0&quot;,&quot;credit&quot;:&quot;&quot;,&quot;camera&quot;:&quot;&quot;,&quot;caption&quot;:&quot;&quot;,&quot;created_timestamp&quot;:&quot;0&quot;,&quot;copyright&quot;:&quot;&quot;,&quot;focal_length&quot;:&quot;0&quot;,&quot;iso&quot;:&quot;0&quot;,&quot;shutter_speed&quot;:&quot;0&quot;,&quot;title&quot;:&quot;&quot;,&quot;orientation&quot;:&quot;0&quot;}\" data-image-title=\"adblock\" data-image-description=\"\" data-medium-file=\"https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2018\/07\/adblock-300x201.png\" data-large-file=\"https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2018\/07\/adblock.png\" class=\"size-full wp-image-24586 aligncenter\" src=\"https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2018\/07\/adblock.png\" alt=\"\" width=\"496\" height=\"332\" srcset=\"https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2018\/07\/adblock.png 496w, https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2018\/07\/adblock-300x201.png 300w\" sizes=\"auto, (max-width: 496px) 100vw, 496px\" \/><\/p>\n<p>If you are getting pop-ups like the above, consistently, you may be running one of the malicious extensions. Here is a full list:<\/p>\n<ul>\n<li>AdRemover for Google Chrome<img decoding=\"async\" src=\"https:\/\/s.w.org\/images\/core\/emoji\/2.4\/72x72\/2122.png\" alt=\"\u2122\" class=\"wp-smiley\" style=\"height: 1em; max-height: 1em;\" \/><\/li>\n<li>uBlock Plus<\/li>\n<li>Adblock Pro<\/li>\n<li>HD for YouTube<img decoding=\"async\" src=\"https:\/\/s.w.org\/images\/core\/emoji\/2.4\/72x72\/2122.png\" alt=\"\u2122\" class=\"wp-smiley\" style=\"height: 1em; max-height: 1em;\" \/><\/li>\n<li>Webutation<\/li>\n<\/ul>\n<p>If so, your best option is to remove it from your browser.<\/p>\n<p><strong>Check out our <a href=\"https:\/\/blog.malwarebytes.com\/puppum\/2017\/04\/adware-the-series-part-1\/#remove\" target=\"_blank\" rel=\"noopener\">guide on Adware<\/a>, that includes a section on extension removal.<\/strong><\/p>\n<p>Take a look at the names of some of these &#8220;extensions&#8221; notice anything? Adblock Pro, uBlock, YouTube, all big names and buzzwords that make these extensions seem more legitimate, add in the fact that fake comments and reviews are created all the time for these types of tools &amp; at the end of the day, the criminal is counting on your ability to not realize &#8216;this is not the app you are looking for&#8217;.<\/p>\n<p>Please be mindful of what you install in your browser and overall on your computer, just like those cheap DVDs you might find at the shop, who have titles so <a href=\"https:\/\/www.imdb.com\/title\/tt0960835\/\" target=\"_blank\" rel=\"noopener\">incredibly similar to a big blockbuster<\/a> film, that folks who aren&#8217;t as familiar with the source material overlook the fact that they are buying a knock-off. Think of this the same way with extensions and plugins and add-ons for your browsers, there are some really great ones out there, but there are a LOT of shady copycats.<\/p>\n<p>Be sure to check user reviews, download numbers and even outside recommendations (searching for &#8220;best ad blocker&#8221; might be a good place to start). This is going to make sure you&#8217;ve installed the right tool that will do the best job.<\/p>\n<p>Thanks for reading, safe surfing, see you next time!<\/p>\n<p>The post <a rel=\"nofollow\" href=\"https:\/\/blog.malwarebytes.com\/cybercrime\/2018\/07\/we-block-shady-ad-blockers\/\">We block shady ad blockers<\/a> appeared first on <a rel=\"nofollow\" href=\"https:\/\/blog.malwarebytes.com\">Malwarebytes Labs<\/a>.<\/p>\n<p><a href=\"https:\/\/blog.malwarebytes.com\/cybercrime\/2018\/07\/we-block-shady-ad-blockers\/\" target=\"bwo\" >https:\/\/blog.malwarebytes.com\/feed\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p><strong>Credit to Author: Malwarebytes Labs| Date: Wed, 11 Jul 2018 18:15:23 +0000<\/strong><\/p>\n<table cellpadding='10'>\n<tr>\n<td valign='top' align='center'><a href='https:\/\/blog.malwarebytes.com\/cybercrime\/2018\/07\/we-block-shady-ad-blockers\/' title='We block shady ad blockers'><img src='https:\/\/blog.malwarebytes.com\/wp-content\/uploads\/2018\/07\/shutterstock_577295263_Med.jpg' border='0'  width='300px'  \/><\/a><\/td>\n<\/tr>\n<tr>\n<td valign='top' align='left'>Some of you have reached out to us concerning Malwarebytes blocking of certain Ad blocking extensions, or an influx in web blocking notifications.\u00a0 First things first, this is not a False Positive.\u00a0 <\/p>\n<p>Categories: <\/p>\n<ul class=\"post-categories\">\n<li><a href=\"https:\/\/blog.malwarebytes.com\/category\/cybercrime\/\" rel=\"category tag\">Cybercrime<\/a><\/li>\n<\/ul>\n<p>Tags: <a href=\"https:\/\/blog.malwarebytes.com\/tag\/adblock-pro\/\" rel=\"tag\">adblock pro<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/adguard\/\" rel=\"tag\">adguard<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/adremover-for-google-chrome\/\" rel=\"tag\">adremover for google chrome<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/adremover-org\/\" rel=\"tag\">adremover.org<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/block\/\" rel=\"tag\">block<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/extension\/\" rel=\"tag\">extension<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/google-chrome\/\" rel=\"tag\">Google Chrome<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/hd-for-youtube\/\" rel=\"tag\">HD for YouTube<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/malwarebytes\/\" rel=\"tag\">Malwarebytes<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/services-adremover-org\/\" rel=\"tag\">services.adremover.org<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/ublock-plus\/\" rel=\"tag\">ublock plus<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/web-block\/\" rel=\"tag\">web block<\/a><a href=\"https:\/\/blog.malwarebytes.com\/tag\/webutation\/\" rel=\"tag\">Webutation<\/a><\/p>\n<table width='100%'>\n<tr>\n<td align=right>\n<p><b>(<a href='https:\/\/blog.malwarebytes.com\/cybercrime\/2018\/07\/we-block-shady-ad-blockers\/' title='We block shady ad blockers'>Read more&#8230;<\/a>)<\/b><\/p>\n<\/td>\n<\/tr>\n<\/table>\n<\/td>\n<\/tr>\n<\/table>\n<p>The post <a rel=\"nofollow\" href=\"https:\/\/blog.malwarebytes.com\/cybercrime\/2018\/07\/we-block-shady-ad-blockers\/\">We block shady ad blockers<\/a> appeared first on <a rel=\"nofollow\" href=\"https:\/\/blog.malwarebytes.com\">Malwarebytes Labs<\/a>.<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[10488,10378],"tags":[18940,18941,18942,18943,15174,4503,11425,11427,18944,10560,18945,18946,18947,18948],"class_list":["post-12777","post","type-post","status-publish","format-standard","hentry","category-malwarebytes","category-security","tag-adblock-pro","tag-adguard","tag-adremover-for-google-chrome","tag-adremover-org","tag-block","tag-cybercrime","tag-extension","tag-google-chrome","tag-hd-for-youtube","tag-malwarebytes","tag-services-adremover-org","tag-ublock-plus","tag-web-block","tag-webutation"],"_links":{"self":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/12777","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=12777"}],"version-history":[{"count":0,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/12777\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=12777"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=12777"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=12777"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}