Avoid online malvertising

Have you ever come across an online ad that seemed too good to be true or made unrealistic promises? Chances are you encountered a malvertisement: a malicious advertisement designed to deceive and harm you. Malvertising is a cyberattack that employs fake or compromised ads to entice clicks, leading to malware infections or phishing attempts that can compromise your device, steal personal data or extort money from you. Cybercriminals may also purchase sponsored search advertisements that appear above legitimate search results, making malicious websites appear trustworthy and increasing the likelihood that users will click them.

Malvertising isn't new, but it's grown more widespread and sophisticated in recent years. Some attackers now use artificial intelligence (AI) to create more convincing advertisements, websites and phishing content that closely resemble legitimate brands and services. According to Confiant's 2024 Malvertising and Ad Quality Index, approximately 1 in every 90 ad impressions contained content that was dangerous or highly disruptive to users.¹ The report also noted that security threats continue to affect the digital advertising ecosystem, including scams, phishing attempts and malicious redirects. Even trusted websites and services have fallen victim to malvertising campaigns.

Here are some tips to help you stay safe:

• Check the URL: Before clicking on any ad, hover your mouse over it and inspect the URL that appears at the bottom of your browser. If the URL looks suspicious with misspellings, random numbers or unfamiliar domains, steer clear. For example, if you see an ad for Amazon.com, but the URL is something like amaz0n.co.uk, it's probably a malvertisement.
• Use an ad blocker: Ad blockers, available as software or browser extensions, can prevent unwanted ads from loading on websites. They are effective at thwarting malvertising. However, some sites may request that you disable your ad blocker, which you should do only if you trust the website and its ads.
• Keep software updated: Ensure that your browser, operating system and security software are up to date. They can detect and block malicious ads or provide warnings before visiting a risky site. Enable the pop-up blocker feature in your browser settings to stop unwanted pop-ups.
• Report suspicious ads: If you encounter a malvertisement, report it to the website owner or the ad network responsible. Reporting can lead to the removal of the fake ad and can protect others from falling victim. U.S. authorities such as the Federal Trade Commission (FTC) or the Internet Crime Complaint Center (IC3) also accept reports of malvertising. 

Malvertising is a serious online threat, affecting internet users across the board. By following these tips, you can identify and sidestep fake ads online, safeguarding your devices and personal information from harm.