View all newsletters
Receive our newsletter - data, insights and analysis delivered to you
  1. Technology
July 2, 2009

Online ads could be outsmarted by new click fraud Trojan

SecureWorks marks out FFSearcher as smartest yet

By CBR Staff Writer

A Trojan that has just been detected by SecureWorks which uses a previously-unseen HTTP request pattern is being branded one of the most sophisticated click fraud malware applications yet. 

According to SecureWorks Counter Threat Unit, the Trojan does not work like most all other click fraud apps.

The Trojan search hijacker SecureWorks has called FFSearcher, after one of the websites used by it, is unlike browser hijackers that change a start page and searches to redirect to a third-party search engine, or Trojans that pull down a list of ad URLs and generate fake clicks on the ads in a hidden browser window. 

With FFSearcher every click on an ad is user-generated, and the user never notices any change in their web-surfing experience, its researchers have found.

The Trojan redirects searches in Google to a third-party website in a way that fools Google’s AdSense for Search. AdSense ads are displayed in search results, and if a user clicks on one of the ads, Google will pay the webmaster a small sum of money, SecureWorks explained in its official blog.

Yahoo! also appears to be a target of this click fraud scheme, it said. 

Content from our partners
Powering AI’s potential: turning promise into reality
Unlocking growth through hybrid cloud: 5 key takeaways
How businesses can safeguard themselves on the cyber frontline

Search engine companies have their work cut out to protect their processes from such an elaborate scheme, and the company believes FFSearcher raises the bar.

Websites in our network
Select and enter your corporate email address Tech Monitor's research, insight and analysis examines the frontiers of digital transformation to help tech leaders navigate the future. Our Changelog newsletter delivers our best work to your inbox every week.
  • CIO
  • CTO
  • CISO
  • CSO
  • CFO
  • CDO
  • CEO
  • Architect Founder
  • MD
  • Director
  • Manager
  • Other
Visit our privacy policy for more information about our services, how Progressive Media Investments may use, process and share your personal data, including information on your rights in respect of your personal data and how you can unsubscribe from future marketing communications. Our services are intended for corporate subscribers and you warrant that the email address submitted is your corporate email address.