Forum Thread

More malicious ads on Slickdeals

gaijin4life 12,699 5,916 October 9, 2015 at 11:21 AM
I couldn't write it down quickly enough, but I got a malicious ad alert for r1.smartyads.com (I think that was the name) that was blocked by malwarebytes when browsing SD today. So it looks like more badware is creeping into your ad network...again.

58 Comments

1 2 3 4

Sign up for a Slickdeals account to remove this ad.

#2
Quote from gaijin4life View Post :
I couldn't write it down quickly enough, but I got a malicious ad alert for r1.smartyads.com (I think that was the name) that was blocked by malwarebytes when browsing SD today. So it looks like more badware is creeping into your ad network...again.
Hey gaijin,

I found their website based on the URL you provided, but we don't work directly with this company. They could be a buyer through Google or one of the mainstream platforms, but it doesn't necessarily mean that it was indeed badware. Malwarebytes has had several false positives that I've seen in the past couple of months. Their alerts are automated and not 100% accurate. That being said, we don't want anything bad on our site, so I'll scan for Smartyads as a buyer and have them blocked at least for the time-being until things are sorted out.

Thanks!
Reply Helpful Comment? 0 0
Joined Nov 2006
L10: ばか
12,699 Posts
5,916 Reputation
Original Poster
Pro
#3
Quote from doublewood View Post :
Hey gaijin,

I found their website based on the URL you provided, but we don't work directly with this company. They could be a buyer through Google or one of the mainstream platforms, but it doesn't necessarily mean that it was indeed badware. Malwarebytes has had several false positives that I've seen in the past couple of months. Their alerts are automated and not 100% accurate. That being said, we don't want anything bad on our site, so I'll scan for Smartyads as a buyer and have them blocked at least for the time-being until things are sorted out.

Thanks!
It said it blocked a redirect, and auto-redirects in banner ads are always badware. Always.

If I had been thinking, I would have done a screencap, but I wasn't expecting it, and it was gone before I thought of that.
Reply Helpful Comment? 0 0
Joined Nov 2006
L10: ばか
12,699 Posts
5,916 Reputation
Original Poster
Pro
#4
Quote from doublewood View Post :
Hey gaijin,

I found their website based on the URL you provided, but we don't work directly with this company. They could be a buyer through Google or one of the mainstream platforms, but it doesn't necessarily mean that it was indeed badware. Malwarebytes has had several false positives that I've seen in the past couple of months. Their alerts are automated and not 100% accurate. That being said, we don't want anything bad on our site, so I'll scan for Smartyads as a buyer and have them blocked at least for the time-being until things are sorted out.

Thanks!
I found the malwarebytes log entry - there were multiple attempts right in a row, on adjacent ports:

Domain, 88.214.193.206, n1.smartyads.com, 54085
Domain, 88.214.193.206, n1.smartyads.com, 54085
Domain, 88.214.193.206, n1.smartyads.com, 54086
Reply Helpful Comment? 0 0
#5
What do I do to this?
Reply Helpful Comment? 0 0
#6
lately I keep getting popup from Malwatebytes that says it is blocking malware .smartyads.
Anyone else getting these? Only happening on slickdeals.
Reply Helpful Comment? 0 0
#7
Quote from qwe1234 View Post :
What do I do to this?
Click Cancel.
Reply Helpful Comment? 0 0
Joined Dec 2004
Boston Strong moderator
9,666 Posts
3,090 Reputation
Global Mod
#8
Quote from wad2k6 View Post :
lately I keep getting popup from Malwatebytes that says it is blocking malware .smartyads.
Anyone else getting these? Only happening on slickdeals.
hi wad2k6,

i'm merging your thread into the existing one in the site issues forum Smilie
Reply Helpful Comment? 0 0

Sign up for a Slickdeals account to remove this ad.

#9
I got one again tonight. I will provide by PM if anyone from SD gives a crap the ports the ad was probing and the website it was redirecting to. This has been an ongoing problem with SD for months . I mean if the referal links revenue is not enough I'm wondering how much revenue the ads bring if they are still up after all the reports of the malicious ads. I might ruffle some feathers but obviously the tech guys that work for SD don't have the know how or will to protect SD users against rogue ads. Just outsource the tech department and find someone that can really do something about the ongoing problem.

I know you guys are going to blame the ad servers you are using and try to convince us again how hard you work to solve the problem. Wanting to solve it is one thing and knowing how to solve it is a different thing.
I'll start again browsing in basic web mobile only.
Reply Helpful Comment? 0 0
#10
Also getting malwarbytes blocking the following:
Detection, 10/16/2015 6:38:11 AM, SYSTEM, DV6500, Protection, Malicious Website Protection, Domain, 88.214.193.206, n1.smartyads.com, 0, Outbound,
Detection, 10/16/2015 6:38:43 AM, SYSTEM, DV6500, Protection, Malicious Website Protection, Domain, 54.235.200.161, stats.traffiliate.com, 0, Outbound,
Detection, 10/16/2015 7:38:40 AM, SYSTEM, DV6500, Protection, Malicious Website Protection, Domain, 88.214.193.219, n1.smartyads.com, 0, Outbound,
Reply Helpful Comment? 0 0
Joined Dec 2003
L10: Grand Master
9,933 Posts
4,316 Reputation
#11
I have also seen smartyads.com alerts from malwarebytes several times this past week. SlickDeals has to stay on top of this or risk losing many of its users, including this old-timer from 2003.
Reply Helpful Comment? 0 0
Joined Jul 2005
Toadally Irrelephant
7,590 Posts
1,187 Reputation
#12
Quote from sduff View Post :
I have also seen smartyads.com alerts from malwarebytes several times this past week. SlickDeals has to stay on top of this or risk losing many of its users, including this old-timer from 2003.
Paging Ms. Schooby; Ms. Schooby please pick up the white courtesy phone. nod
Reply Helpful Comment? 0 0
Joined Dec 2004
Community Relations Manager
65,797 Posts
4,339 Reputation
Staff
#13
Quote from doublewood View Post :
Hey gaijin,

I found their website based on the URL you provided, but we don't work directly with this company. They could be a buyer through Google or one of the mainstream platforms, but it doesn't necessarily mean that it was indeed badware. Malwarebytes has had several false positives that I've seen in the past couple of months. Their alerts are automated and not 100% accurate. That being said, we don't want anything bad on our site, so I'll scan for Smartyads as a buyer and have them blocked at least for the time-being until things are sorted out.

Thanks!
Quote from Binar View Post :
I got one again tonight. I will provide by PM if anyone from SD gives a crap the ports the ad was probing and the website it was redirecting to. This has been an ongoing problem with SD for months . I mean if the referal links revenue is not enough I'm wondering how much revenue the ads bring if they are still up after all the reports of the malicious ads. I might ruffle some feathers but obviously the tech guys that work for SD don't have the know how or will to protect SD users against rogue ads. Just outsource the tech department and find someone that can really do something about the ongoing problem.

I know you guys are going to blame the ad servers you are using and try to convince us again how hard you work to solve the problem. Wanting to solve it is one thing and knowing how to solve it is a different thing.
I'll start again browsing in basic web mobile only.
Quote from DrDale View Post :
Also getting malwarbytes blocking the following:
Detection, 10/16/2015 6:38:11 AM, SYSTEM, DV6500, Protection, Malicious Website Protection, Domain, 88.214.193.206, n1.smartyads.com, 0, Outbound,
Detection, 10/16/2015 6:38:43 AM, SYSTEM, DV6500, Protection, Malicious Website Protection, Domain, 54.235.200.161, stats.traffiliate.com, 0, Outbound,
Detection, 10/16/2015 7:38:40 AM, SYSTEM, DV6500, Protection, Malicious Website Protection, Domain, 88.214.193.219, n1.smartyads.com, 0, Outbound,
Quote from sduff View Post :
I have also seen smartyads.com alerts from malwarebytes several times this past week. SlickDeals has to stay on top of this or risk losing many of its users, including this old-timer from 2003.
Quote from VorlonFrog View Post :
Paging Ms. Schooby; Ms. Schooby please pick up the white courtesy phone. nod
Thanks...pinging doublewood.
Reply Helpful Comment? 0 0
#14
Quote from sduff View Post :
I have also seen smartyads.com alerts from malwarebytes several times this past week. SlickDeals has to stay on top of this or risk losing many of its users, including this old-timer from 2003.
If you get an alert like and your confident it's not adware on your computer, you can a report with the google safe browsing project: https://www.google.com/safebrowsi...t_badware/

False positives are possible. If you want to harden your computer against zero days, install Microsoft's EMET [microsoft.com] which can force programs to use various protection features like DEP and ASLR making it considerably harder to exploit.
Reply Helpful Comment? 0 0
Last edited by jkee November 1, 2015 at 11:49 AM
#15
Quote from jkee View Post :
If you get an alert like that just file a report with the google safe browsing project: https://www.google.com/safebrowsi...t_badware/
THAT will motivate SD to take action...
I guess this might solve the problem. Nobody will pay affiliate links to a site deemed malicious by Google .
If it happens sd deserves it since the malicious ads kept shown for months . I started reporting them at least 6 months ago. I mean everyone uses ads but this is the only place I've seen redirect / malicious ads .
With the trafic sd has they might get reported into oblivion faster that you can say "malware".
What a shame

By doing so you are helping other users that are not savy enough to use an anti virus, block ports , use certain browsing apps, install certain browser extensions, browse on mobile basic html, and so on JUST to browse a web site
Reply Helpful Comment? 0 0
Last edited by Binar October 17, 2015 at 11:44 AM
Page 1 of 4
1 2 3 4
Join the Conversation
Add a Comment
 
Copyright 1999 - 2016. Slickdeals, LLC. All Rights Reserved. Copyright / Infringement Policy  •  Privacy Policy  •  Terms of Service  •  Acceptable Use Policy (Rules)  •  Interest-Based Ads
Link Copied to Clipboard