Plugrush popunders - malware? - GoFuckYourself.com

signupdamnit · 11-07-2012, 01:51 PM

I'm seeing some user reports over the last week of malware possibly coming up from some of the plugrush popunders. I don't have specifics but I thought I'd put something up here so people can watch their own sites. The reports are that some of the popunders are trying to install malware ow Windows systems. That's all the info I have at the moment.

I notice that there have been other reports in the last few months: http://www.mywot.com/en/scorecard/plugrush.com

EddyTheDog · 11-07-2012, 02:23 PM

Its happened before - I think its something they battle with all the time.

The scammers are sneaky bastards and will go to any lengths to pull the wool over their eyes.

I don't think for a minute that PlugRush condone it....

Plugrush · 11-08-2012, 05:52 AM

Yes we have been having a couple of problems the past week, but we are now working with some major anti-malware and anti-virus companies to get rid of all of these. We are taking this EXTREMELY serious, and we are working as hard as possible to stop this from happening...If anyone has any suggestions please feel free to comment and let us know, we take all of you serious.

EddyTheDog · 11-08-2012, 06:19 AM

Quote:

Originally Posted by Plugrush

Yes we have been having a couple of problems the past week, but we are now working with some major anti-malware and anti-virus companies to get rid of all of these. We are taking this EXTREMELY serious, and we are working as hard as possible to stop this from happening...If anyone has any suggestions please feel free to comment and let us know, we take all of you serious.

I remember back in the day that the TGPs took a snapshot of the page they listed, they then had a bot that checked it for alterations.

Every change needed approval.

It would be harder to do it now - but it might be a challenge for a good script guy....

nextri · 11-08-2012, 07:04 AM

Quote:

Originally Posted by EddyTheDog

I remember back in the day that the TGPs took a snapshot of the page they listed, they then had a bot that checked it for alterations.

Every change needed approval.

It would be harder to do it now - but it might be a challenge for a good script guy....

Wouldn't be a problem to code it. But not really a realistic requirement towards todays advertisers. Advertisers want to have dynamic campaigns which often shows content or landingpage based on the visitors location, browsers, OS and other things, in order to maximize the revenue spent. Or they might even just have a landingpage that shows random profiles, online cams or latest updates. None of that would be possible if we had a requirement that the page can't change.

What we have recently done though, is create a script that is constantly crawling campaigns from 70 different countries, and checking where they are redirecting to from different countries, and then check all destinations against multiple online virus and malware database services like google safesearch and others. It has caught quite a few shady campaigns already, and we will continue to improve on it to make it even more efficient. It's our top priority to get rid on any malware issues on our network.

signupdamnit · 11-08-2012, 07:42 AM

It's pretty serious because if you are branding a site it's horrible to have users running around talking about getting viruses from your sites. I had to pull the pop unders from that site and will have to wait a few months before I consider putting them back. I can't risk it happening again. I would lose all credibility with my users.

I would love a whitelist system where I can approve advertisers and maybe even advertisements. Especially for pop unders. Failing that some sort of ranking system might help where I can specify only the most trusted based on longevity and volume can place ads on my site. It may hurt the earnings on the site but for some sites I would rather not take the risk.

I know Plugrush isn't allowing it on purpose. Have you guys considered trying to sue the people doing this or bringing criminal charges against them? Presumably you know who they are.

ravo · 11-08-2012, 04:58 PM

At fpctraffic, we've been battling the same issues as plugrush on our popunders as well. We've got a pretty good system in place, but I understand plugrush's frustration with the issue. In many cases it's a "whack-a-mole" problem.

We've recently implemented a customized whitelist for some key publishers (as signupdamnit suggested), and it's seems to be working.

I also welcome any suggestions to improve not only our system, but all popunder traffic systems. No legit broker wants malware in their system.

Tofu · 11-08-2012, 05:09 PM

Quote:

Originally Posted by Plugrush

...we take all of you serious.

Would you mind taking me serious and return my support email, please?

Thanks.

11-07-2012, 01:51 PM	#1
signupdamnit Confirmed User Industry Role: Join Date: Aug 2007 Posts: 6,697	Plugrush popunders - malware? I'm seeing some user reports over the last week of malware possibly coming up from some of the plugrush popunders. I don't have specifics but I thought I'd put something up here so people can watch their own sites. The reports are that some of the popunders are trying to install malware ow Windows systems. That's all the info I have at the moment. I notice that there have been other reports in the last few months: http://www.mywot.com/en/scorecard/plugrush.com __________________ You don't like my posts? Put me on ignore or fuck right off. I'll say what I want.

11-08-2012, 05:52 AM	#3
Plugrush Moving Traffic Forward Industry Role: Join Date: Apr 2008 Location: Norway Posts: 384	Yes we have been having a couple of problems the past week, but we are now working with some major anti-malware and anti-virus companies to get rid of all of these. We are taking this EXTREMELY serious, and we are working as hard as possible to stop this from happening...If anyone has any suggestions please feel free to comment and let us know, we take all of you serious. __________________ Self-Serve Traffic Network Adult & Mainstream Traffic Open for everybody that wants to sell or buy traffic + RTB/DSP/XML

11-08-2012, 07:42 AM	#6
signupdamnit Confirmed User Industry Role: Join Date: Aug 2007 Posts: 6,697	It's pretty serious because if you are branding a site it's horrible to have users running around talking about getting viruses from your sites. I had to pull the pop unders from that site and will have to wait a few months before I consider putting them back. I can't risk it happening again. I would lose all credibility with my users. I would love a whitelist system where I can approve advertisers and maybe even advertisements. Especially for pop unders. Failing that some sort of ranking system might help where I can specify only the most trusted based on longevity and volume can place ads on my site. It may hurt the earnings on the site but for some sites I would rather not take the risk. I know Plugrush isn't allowing it on purpose. Have you guys considered trying to sue the people doing this or bringing criminal charges against them? Presumably you know who they are. __________________ You don't like my posts? Put me on ignore or fuck right off. I'll say what I want. Last edited by signupdamnit; 11-08-2012 at 07:44 AM..

11-08-2012, 04:58 PM	#7
ravo Confirmed User Industry Role: Join Date: Jun 2001 Location: Skype: ravo.fpctraffic Posts: 5,440	At fpctraffic, we've been battling the same issues as plugrush on our popunders as well. We've got a pretty good system in place, but I understand plugrush's frustration with the issue. In many cases it's a "whack-a-mole" problem. We've recently implemented a customized whitelist for some key publishers (as signupdamnit suggested), and it's seems to be working. I also welcome any suggestions to improve not only our system, but all popunder traffic systems. No legit broker wants malware in their system. __________________ AdultAdBroker - Buy and Sell Your Flat Rate Banners, Links, Tabs, Pops, Email Clicks and Members' Area Traffic - updated June 2025

11-07-2012, 02:23 PM	#2
EddyTheDog Just Doing My Own Thing Industry Role: Join Date: Jan 2011 Location: London, Spain, New Zealand, GFY - Not Croydon... Posts: 25,064	Its happened before - I think its something they battle with all the time. The scammers are sneaky bastards and will go to any lengths to pull the wool over their eyes. I don't think for a minute that PlugRush condone it....