Online fraud vigilante firm, WhiteOps, recently discovered ‘Methbot‘ – a new illegal ad campaign that makes around $3-5 million a day by committing fraud with ad operators across the United States.
A group of Russian criminals are making between $ 3 million and $ 5 million a day in a brass attack on the advertising market, security firm White Ops said today. It is the biggest fraud discovered perpetrated by digital advertising and false clicks on video ads, the company said.
The crew, called Ad Ops White Fraud Komanda or "AFK13" planned his machinations with meticulous details. First, they created over 6000 domains and 250,267 different URLs within those that seemed to belong to real-name big name publishers, from ESPN to Vogue. But anything that could be hosted on the page was a video ad.
With fake domain registrations, they managed to trick the algorithms that decided where the most profitable ads would buy their fraudulent web space. These algorithms usually make offers for space more suitable for the audience targeted by the ad, in full auction in milliseconds ad. But AFK13 were able to play the system so that its space was bought by the big brands.
AFK13 invested heavily in an agricultural bot, taking place in the data centers so that they could pull fake traffic over 570,000 bots in these ads, increasing revenue through the pay per click system that exploded. As part of this white called Ops campaign Methbot, these robots "watched" up to 300 million video ads a day, with an average distribution of $ 13.04 per thousand false visions. And scammers had their bot army replicate the actions of real people with fake clicks, mouse movements and social networking information.
For these robots seem more real and thus to bypass the normal detection of fraud measures, the group has obtained hundreds of thousands of IP addresses and associated with major ISPs in the US, it seemed they were based on US households. These IP addresses have been "fraudulently obtained" at least two of the five regional Internet registers around the world.
White Ops began tracking activity in September 2015, when he saw that bot traffic through the network of a customer. However, it was not until October 2016, Methbot entered full swing.
We do not know where the Russian link comes from. Eddie Schwartz, Chief Operating Officer of the White Ops, told me that the company has found links between the data centers and the "unique signals" used by the hackers. He could not provide more details for fear of revealing too much about the White Ops methods. However, he said he had "direct allocation" for those behind the crime.
"We have zero doubt whether it is a group based in Russia, is a group, have been working with the application of federal law for weeks," Schwartz said.
Buyers lose a lot of time
Those who spend money on automated systems lose large sums, not only Methbot but similar campaigns. However, these funds can never recover. "This is part of the challenge," said Schwartz, noting that when judgments were possible in Western countries, money was recovered. "Historically ... it was difficult to get cooperation with Russia To pursue cybercrime ".
Ops White said he had provided information to the police, which investigation. He did not say which agency. Geir Magnusson, advertising fraud expert and CTO of SourcePoint Technologies, said it should be possible to close the AFK13 advertising market.
"All stakeholders in an ecosystem tender are known and have contractual business relationships - it's not a" dark net "of anonymous buyers and sellers," said Magnusson, Examined the results of the blank operations prior to publication.
"I think the key will be to ensure that information that what White Ops has found large players in dissemination and ecosystem work closely together to help each other" follow the money " And impose the rejection of bad actors. "
Worrying, the fraud could be even higher than reported today. "Because White Ops is able to analyze the data directly observed by white Ops, the total current monetary losses within the ecosystem of advertising increased exponentially may be more," the company wrote in its White Paper. "At this point, the operation Methbot has been incorporated into the layers of ecosystem advertising, the only way to close it is to make public details to help the parties involved to take action."
A group of Russian criminals are making between $ 3 million and $ 5 million a day in a brass attack on the advertising market, security firm White Ops said today. It is the biggest fraud discovered perpetrated by digital advertising and false clicks on video ads, the company said.
The crew, called Ad Ops White Fraud Komanda or "AFK13" planned his machinations with meticulous details. First, they created over 6000 domains and 250,267 different URLs within those that seemed to belong to real-name big name publishers, from ESPN to Vogue. But anything that could be hosted on the page was a video ad.
With fake domain registrations, they managed to trick the algorithms that decided where the most profitable ads would buy their fraudulent web space. These algorithms usually make offers for space more suitable for the audience targeted by the ad, in full auction in milliseconds ad. But AFK13 were able to play the system so that its space was bought by the big brands.
AFK13 invested heavily in an agricultural bot, taking place in the data centers so that they could pull fake traffic over 570,000 bots in these ads, increasing revenue through the pay per click system that exploded. As part of this white called Ops campaign Methbot, these robots "watched" up to 300 million video ads a day, with an average distribution of $ 13.04 per thousand false visions. And scammers had their bot army replicate the actions of real people with fake clicks, mouse movements and social networking information.
For these robots seem more real and thus to bypass the normal detection of fraud measures, the group has obtained hundreds of thousands of IP addresses and associated with major ISPs in the US, it seemed they were based on US households. These IP addresses have been "fraudulently obtained" at least two of the five regional Internet registers around the world.
White Ops began tracking activity in September 2015, when he saw that bot traffic through the network of a customer. However, it was not until October 2016, Methbot entered full swing.
We do not know where the Russian link comes from. Eddie Schwartz, Chief Operating Officer of the White Ops, told me that the company has found links between the data centers and the "unique signals" used by the hackers. He could not provide more details for fear of revealing too much about the White Ops methods. However, he said he had "direct allocation" for those behind the crime.
"We have zero doubt whether it is a group based in Russia, is a group, have been working with the application of federal law for weeks," Schwartz said.
Buyers lose a lot of time
Those who spend money on automated systems lose large sums, not only Methbot but similar campaigns. However, these funds can never recover. "This is part of the challenge," said Schwartz, noting that when judgments were possible in Western countries, money was recovered. "Historically ... it was difficult to get cooperation with Russia To pursue cybercrime ".
Ops White said he had provided information to the police, which investigation. He did not say which agency. Geir Magnusson, advertising fraud expert and CTO of SourcePoint Technologies, said it should be possible to close the AFK13 advertising market.
"All stakeholders in an ecosystem tender are known and have contractual business relationships - it's not a" dark net "of anonymous buyers and sellers," said Magnusson, Examined the results of the blank operations prior to publication.
"I think the key will be to ensure that information that what White Ops has found large players in dissemination and ecosystem work closely together to help each other" follow the money " And impose the rejection of bad actors. "
Worrying, the fraud could be even higher than reported today. "Because White Ops is able to analyze the data directly observed by white Ops, the total current monetary losses within the ecosystem of advertising increased exponentially may be more," the company wrote in its White Paper. "At this point, the operation Methbot has been incorporated into the layers of ecosystem advertising, the only way to close it is to make public details to help the parties involved to take action."
- Download: Spoofed Domains >
- Download: Full List of URLs >
- Download: Compromised IP Addresses >
- Download: IP Ranges (CIDR Format) >
- Don’t worry – we’ve got real software for real people here : Download the latest for free, now!