Clicking a banner advertisement could be dangerous to your PC's health, if the click takes you to a Web site that attempts to download malicious code.
This happened last week, when some European Web sites were victims of an attack that turned their banner advertising into hyperlinks to sites run by cyber criminals. The attack affected sites in the UK, Sweden and the Netherlands, including The Register computer news site. All were customers of Falk AG, a German ad serving company.
This particular attack is known as the Bofra/IFrame exploit, and it takes advantage of a weakness in Microsoft's Internet Explorer 6.0 browser. The result was that for around six hours -- until the problem was detected -- users of the affected sites were in danger of being redirected to sites that tried to install malicious software such as "porn dialers" and spyware on their PCs.
The exploit does not affect users running alternative browsers, such as Firefox, or Windows XP users who have installed Service Pack 2 (SP2).
Falk AG issued a statement saying: "The cause was a hacker attack on one of our load balancers. This attack made use of a weak point on this specific type of load balancer."
The function of a load balancer is to evenly distribute requests to the multiple servers behind it. This particular system was only used to handle a specific request type to its ad server. Once it became aware of the problem, Falk AG shut down the affected load balancer and removed it. It also carried out checks to ensure all other load balancers were secure.
One of the UK sites affected, The Register, informed readers of the problem and suspended ad serving from Falk for three days. Drew Cullen, the editor of The Register, said: "This is a cause for concern because we remain unsure whether the cause of the problem has been clearly identified. We are also concerned that many sites affected have just kept quiet. When something like this happens, it is imperative that sites make a full disclosure."
Asserta.com, another of Falk's UK customers, would not comment. It remains unclear how many sites were affected, but The Register estimates it could be as high as 30.
On its site, The Register said it had 11,660 unique visitors using Windows and IE6 during the period it was being served malicious ads. But the impact was likely to be limited, because Falk estimates that only one in 30 requests for a banner ad would have been redirected to the site containing the Bofra worm.
Danny Meadows-Klue, the chief executive of the Interactive Advertising Bureau, said the problem was being closely monitored.
"Every community has its vandals and we have to warn users to ensure they are protected with anti-virus software and firewalls.
"Unfortunately, this industry does suffer periodically from this kind of thing," he said.
He agreed that such attacks could increase, but did not think it was likely.
However, analyst firm Gartner is predicting that Bofra/IFrame attacks will increase, especially around systems with what it calls sloppy patching. In an e-mail, it said: "Attacks of this type will become increasingly common, especially around transition points -- systems where multiple versions of software (such as Windows 2000 and XP) are in use without full patches across both platforms."
Meanwhile, Microsoft issued a statement saying it was investigating the attack and confirmed that the vulnerability only existed for IE6. It is encouraging customers to upgrade to SP2.
Whatever the result, there is no doubt that many sites running online ads will be taking security more seriously in the wake of the latest attack. If users become wary of clicking banner ads, this could have a devastating effect on their income.
The government is aiming to recruit 1,096 foreign English teachers and teaching assistants this year, the Ministry of Education said yesterday. The foreign teachers would work closely with elementary and junior-high instructors to create and teach courses, ministry official Tsai Yi-ching (蔡宜靜) said. Together, they would create an immersive language environment, helping to motivate students while enhancing the skills of local teachers, she said. The ministry has since 2021 been recruiting foreign teachers through the Taiwan Foreign English Teacher Program, which offers placement, salary, housing and other benefits to eligible foreign teachers. Two centers serving northern and southern Taiwan assist in recruiting and training
WIDE NET: Health officials said they are considering all possibilities, such as bongkrekic acid, while the city mayor said they have not ruled out the possibility of a malicious act of poisoning Two people who dined at a restaurant in Taipei’s Far Eastern Department Store Xinyi A13 last week have died, while four are in intensive care, the Taipei Department of Health said yesterday. All of the outlets of Malaysian vegetarian restaurant franchise Polam Kopitiam have been ordered to close pending an investigation after 11 people became ill due to suspected food poisoning, city officials told a news conference in Taipei. The first fatality, a 39-year-old man who ate at the restaurant on Friday last week, died of kidney failure two days later at the city’s Mackay Memorial Hospital. A 66-year-old man who dined
‘CARRIER KILLERS’: The Tuo Chiang-class corvettes’ stealth capability means they have a radar cross-section as small as the size of a fishing boat, an analyst said President Tsai Ing-wen (蔡英文) yesterday presided over a ceremony at Yilan County’s Suao Harbor (蘇澳港), where the navy took delivery of two indigenous Tuo Chiang-class corvettes. The corvettes, An Chiang (安江) and Wan Chiang (萬江), along with the introduction of the coast guard’s third and fourth 4,000-tonne cutters earlier this month, are a testament to Taiwan’s shipbuilding capability and signify the nation’s resolve to defend democracy and freedom, Tsai said. The vessels are also the last two of six Tuo Chiang-class corvettes ordered from Lungteh Shipbuilding Co (龍德造船) by the navy, Tsai said. The first Tuo Chiang-class vessel delivered was Ta Chiang (塔江)
EYE ON STRAIT: The US spending bill ‘doubles security cooperation funding for Taiwan,’ while also seeking to counter the influence of China US President Joe Biden on Saturday signed into law a US$1.2 trillion spending package that includes US$300 million in foreign military financing to Taiwan, as well as funding for Taipei-Washington cooperative projects. The US Congress early on Saturday overwhelmingly passed the Further Consolidated Appropriations Act 2024 to avoid a partial shutdown and fund the government through September for a fiscal year that began six months ago. Under the package, the Defense Appropriations Act would provide a US$27 billion increase from the previous fiscal year to fund “critical national defense efforts, including countering the PRC [People’s Republic of China],” according to a summary