Experts: Google doesn't police advertisers

Malicious advertisements in Google's AdWords system could be infecting end-users with virus code

Google could avoid future malware attacks carried out using advertisements posted on its Web sites if the company more thoroughly investigated customers of its AdWords system, according to security and legal experts.

On April 25, researchers with security software maker Exploit Prevention Labs announced that they had uncovered hard evidence that malware distributors were using advertisements placed via Google's automated AdWords system to infect unsuspecting end-users with virus code.

According to Roger Thompson, chief technology officer at Exploit, the malware brokers used fraudulent advertisements for legitimate organizations such as the Better Business Bureau to trick users into clicking on the links.

When someone clicked such a link, the ad would redirect their browser through URLs that attempted to automatically download virus programs onto their computers before passing them along to the actual sites that were advertised. The system works so quickly that end-users do not notice that their browsers have traveled through the intermediary sites, making it almost impossible to detect the attacks, Thompson said.

Using AdWords, any company or individual can bid on specific terms to have their ads show up next to Web search results for the specific words they have purchased. People who bid the most money for any particular term or set of words receive the highest ad placement, or so-called sponsored links, next to Google's Web search results.

Thompson said that his team discovered a number of the ad-borne threats built to show up alongside results for a range of search terms, including queries for information on business conferences and auto shows. Many others involved terms related to business organizations.

The company said it only found the threats after one of its customers noticed the suspicious activity using the software maker's secure Web surfing application.

When the individual entered the phrase "how to start a business" into Google, the top-ranked sponsored search listing advertised, a legitimate organization, but the hyperlink it offered led to a site that attempted to install a password-stealing keystroke logging attack on the user's PC, according to Exploit.

The security company traced the malware distribution scheme back to, a domain name registered in early April that began advertising on Google soon thereafter. The fraudulent advertisements all funneled users through infected Smarttracker URLs, Thompson said.

Google officials said that the search company canceled the affected ads after it was informed of the situation. Media representatives with Google said the firm is aggressively working to eliminate such problems.

"We actively work to detect and remove sites that serve malware to our users both in our ad network and in our search results," the company said in a statement. "We have manual and automatic processes in place to detect and enforce these policies; we also encourage our advertisers to contact Google directly if they have concerns or detect suspicious malware."

Thompson and other security experts claim, however, that the problem exists because Google does not sufficiently police its advertisers.

"Google says they are doing the best that they can, but their business model is to take as much money as they can for advertisements. No matter how much due diligence they do, it's a difficult position to be in, but clearly they are not doing enough," Thompson said. "If they don't do a better job of vetting their customers, we will see this sort of thing happening again and again."

Join the PC World newsletter!

Error: Please check your email address.

Our Back to Business guide highlights the best products for you to boost your productivity at home, on the road, at the office, or in the classroom.

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Matt Hines

Show Comments

Cool Tech

Crucial® BX200 SATA 2.5” 7mm (with 9.5mm adapter) Internal Solid State Drive

Learn more >

D-Link PowerLine AV2 2000 Gigabit Network Kit

Learn more >

Xiro Drone Xplorer V -3 Axis Gimbal & 1080p Full HD 14MP Camera

Learn more >

ASUS ROG Swift PG279Q – Reign beyond virtual world

Learn more >

Lexar® Professional 1000x microSDHC™/microSDXC™ UHS-II cards

Learn more >

D-Link TAIPAN AC3200 Ultra Wi-Fi Modem Router (DSL-4320L)

Learn more >

Gadgets & Things


Learn more >

Lexar® Professional 1000x microSDHC™/microSDXC™ UHS-II cards

Learn more >

Lexar Professional 2000x SDHC™/SDXC™ UHS-II cards

Learn more >

Family Friendly

ASUS VivoPC VM62 - Incredibly Powerful, Unbelievably Small

Learn more >

Lexar® Professional 1000x microSDHC™/microSDXC™ UHS-II cards

Learn more >

Lexar Professional 2000x SDHC™/SDXC™ UHS-II cards

Learn more >

Stocking Stuffer

Lexar Professional 2000x SDHC™/SDXC™ UHS-II cards

Learn more >

Lexar® Professional 1000x microSDHC™/microSDXC™ UHS-II cards

Learn more >

Christmas Gift Guide

Click for more ›

Most Popular Reviews

Best Deals on PC World

Latest News Articles


GGG Evaluation Team

Kathy Cassidy


First impression on unpacking the Q702 test unit was the solid feel and clean, minimalist styling.

Anthony Grifoni


For work use, Microsoft Word and Excel programs pre-installed on the device are adequate for preparing short documents.

Steph Mundell


The Fujitsu LifeBook UH574 allowed for great mobility without being obnoxiously heavy or clunky. Its twelve hours of battery life did not disappoint.

Andrew Mitsi


The screen was particularly good. It is bright and visible from most angles, however heat is an issue, particularly around the Windows button on the front, and on the back where the battery housing is located.

Simon Harriott


My first impression after unboxing the Q702 is that it is a nice looking unit. Styling is somewhat minimalist but very effective. The tablet part, once detached, has a nice weight, and no buttons or switches are located in awkward or intrusive positions.


Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?