How Ad Blockers Can Protect Against Spyware
Ad blockers might seem like an unlikely defense in the fight against spyware, but new reporting reveals how spyware makers are using online ads as a weapon for surveillance. By harnessing the power of banner ads, spyware makers have developed a method to locate and silently infect specific targets with spyware.
One startup, Intellexa, a European company known for developing the Predator spyware, has been working on an ad-based spyware infection system. Predator has the capability to access the complete contents of a target’s phone in real-time. Israeli news outlet Haaretz obtained documents that revealed Intellexa’s proof-of-concept system called Aladdin. This system enabled the planting of phone spyware through online ads. The documents included a demo of Aladdin, which showcased how the spyware infects its targets through malicious ads that appear to target graphic designers and activists with job offers. This method allows the spyware to be introduced to their devices discreetly.
The full development status of Aladdin or whether it was sold to government customers remains unknown. However, it is clear that spyware makers are actively exploring new ways to exploit online ads for their surveillance activities. Another Israeli company, Insanet, has also succeeded in developing an ad-based infection system that can locate an individual within an advertising network.
The abuse of online ad exchanges poses a significant threat. While online ads are essential for generating revenue for website owners, they can be manipulated to deliver malicious code to a target’s device. This method, known as malvertising, involves injecting the malicious code into the ads displayed on websites. Typically, these attacks require some form of interaction from the victim, such as clicking on a link or opening a malicious file.
What makes this issue even more concerning is the global ubiquity of online advertising. Governments now have greater access to target individuals, including their critics, with stealthy spyware. The reach of online advertising allows for the widespread distribution of spyware, making it easier for governments to conduct surveillance on their targets.
While it is impossible to make any device completely unhackable, using ad blockers can be an effective measure to prevent malvertising and ad-based malware from infiltrating browsers. Ad blockers work by preventing ads from displaying in web browsers. Rather than simply hiding the ads, ad blockers block the underlying websites from loading the ads altogether. This not only helps to protect against malware but also enhances privacy since ad exchanges cannot track users’ browsing habits.
Security experts have long recommended the use of ad blockers as a precautionary measure against malvertising attacks. In fact, in a public service announcement, the FBI advised the public to use ad blockers for online safety. It’s a simple yet effective step that individuals can take to safeguard their devices and protect themselves against spyware.
In response to the Haaretz report, John Scott-Railton, a senior researcher at Citizen Lab who has extensively investigated government spyware, emphasized the importance of ad blockers. He tweeted, “Everyone should block ads. It’s a matter of safety.” By taking this precaution, individuals can significantly reduce their vulnerability to online surveillance and protect their privacy.