Malvertising on DoubleClick

[corkyg]

Once asgain, Google's DoubleClick is the source of serious abuse that has preyed on high profile folks.

https://blog.malwarebytes.org/malve...rk-abused-once-again-in-malvertising-attacks/

 

[Jodell88]

NoScript should protect a user from this, correct?

 

[corkyg]

I don't know about NoScript. MBAM Prem handles it. I think you have to be some sort of a celebrity to be a good target. That ain't me for sure! 🙂

 

[VirtualLarry]

NoScript should protect a user from this, correct?

Uh, no. It's a Flash Player exploit, apparently. Unless NoScript block flash entirely by default.

I don't know about NoScript. MBAM Prem handles it. I think you have to be some sort of a celebrity to be a good target. That ain't me for sure! 🙂

Uh, no. The whole point of malvertising, is that it isn't targeted, it's widespread, to gain as many victims as possible.

 

[KillerBee]

I think AdblockPlus would have blocked it
but need to turn off the default "allow some non-intrusive advertising" filter preference

 

[lxskllr]

Uh, no. It's a Flash Player exploit, apparently. Unless NoScript block flash entirely by default.

I /think/ Flash may be blocked by default, but I can't remember. It's been awhile since I set it up. I run with Flash disabled, and turn it on every couple of months or so when I need it for a site. I use the addon FlashDisable. It's a simple icon you click to toggle it on or off. Makes it very easy to use.

 

[Jodell88]

Uh, no. It's a Flash Player exploit, apparently. Unless NoScript block flash entirely by default.
/QUOTE]
NoScript blocks all JavaScript by default. Even If Flash and Goolge's DoubleClick are allowed, because the script is from another site, it is blocked.

NoScipt has also saved me on Anandtech Forums a couple of times. :awe:

 

[VirtualLarry]

NoScript blocks all JavaScript by default. Even If Flash and Goolge's DoubleClick are allowed, because the script is from another site, it is blocked.

Help me to understand this. I thought that the re-direct script was INSIDE an .SWF file. How does Noscript block scripts INSIDE Flash Player itself? I thought that it only blocked scripts in the browser. Is there cross-communication between the scripting language used by SWF files, and the JavaScript executed by your web browser?

 

[John Connor]

NoScript WILL block flash and I have it collapse the element unless I click it. I have base 2nd domains on by default though to lessen the cumbersomeness.

 

[John Connor]

And I would think Adblock Edge would block Doubleclick.net anyway...