"This is a serious situation that damages users and webmasters alike," said Attila-Mihaly Balazs, a BitDefender virus analyst. "Users are affected because the advertisements and/or the linked sites may contain malicious code, which is a very likely situation, given that they are promoted using malware in the first place. Webmasters are affected because the trojan takes away viewers and thus a possible money source from their websites."
Trojan Detected that Hijacks Google Ads
Infected machines' browsers read ads from a rouge server.
Antivirus analysts have detected a new Trojan which hijacks Google text advertisements, replacing them with ads from a different provider. The threat, which is identified as Trojan.Qhost.WU, modifies the infected computers' Hosts file. The modified file contains a line redirecting the host to a different address so that the infected machines' browsers read ads from a rouge server at the replacement address rather than from Google.
"This is a serious situation that damages users and webmasters alike," said Attila-Mihaly Balazs, a BitDefender virus analyst. "Users are affected because the advertisements and/or the linked sites may contain malicious code, which is a very likely situation, given that they are promoted using malware in the first place. Webmasters are affected because the trojan takes away viewers and thus a possible money source from their websites."
"This is a serious situation that damages users and webmasters alike," said Attila-Mihaly Balazs, a BitDefender virus analyst. "Users are affected because the advertisements and/or the linked sites may contain malicious code, which is a very likely situation, given that they are promoted using malware in the first place. Webmasters are affected because the trojan takes away viewers and thus a possible money source from their websites."
