Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Cybercrime

Users Warned of Malware After Ads Reported on Wikipedia Site

Wikimedia, the foundation responsible for information hub Wikipedia, is warning users that if they see ads on the encyclopedia’s webpage, their system might be infected with malware. The ads in question are not the ones asking for donations that show up once a year, but for-profit related adverts.

Wikimedia, the foundation responsible for information hub Wikipedia, is warning users that if they see ads on the encyclopedia’s webpage, their system might be infected with malware. The ads in question are not the ones asking for donations that show up once a year, but for-profit related adverts.

“We never run ads on Wikipedia. Wikipedia is funded by more than a million donors, who give an average donation of less than 30 dollars. We run fundraising appeals, usually at the end of the year. If you’re seeing advertisements for a for-profit industry or anything but our fundraiser, then your web browser has likely been infected with malware,” Wikimedia’s Philippe Beaudette wrote on the foundation’s blog.

“Ads injected in this manner may be confined to some sites, even just to Wikipedia, or they may show up on all sites you visit. Browsing through a secure (HTTPS) connection may cause the ads to disappear, but will not fix the underlying problem…”

The blog post mentioned additional causes for the ads, including hijacked browsers, which have been taken over by toolbars that display ads within websites or injected advertisements that come from an ISP.

Disabling browser add-ons is the first step to determining the issue, but if the system is infected with malware that wont remove the underlying problem. Obviously, using anti-virus software will help, but most AV programs allow toolbars.

It’s only recently that some browser add-ons are being blocked or disabled due to the fact that they inject content through the browser, which is often seen as a malicious act. However, more often than not, browser toolbars are legitimately installed. They often come packaged within Shareware or Trialware installations.

Some are shady, such as the “I Want This” toolbar for Chrome, which Wikimedia mentions in their post on the topic. The distributers of “I Want This” earn money from affiliate marketing and ad distributions. Other toolbars are useful, such as WOT, which rates search results and websites based on community reports of trustworthiness.

No matter what though, “you won’t be seeing legitimate advertisements on Wikipedia,” added Beaudette.

Advertisement. Scroll to continue reading.
Written By

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.

Register

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.

Register

People on the Move

Professional services company Slalom has appointed Christopher Burger as its first CISO.

Allied Universal announced that Deanna Steele has joined the company as CIO for North America.

Former DoD CISO Jack Wilmer has been named CEO of defensive and offensive cyber solutions provider SIXGEN.

More People On The Move

Expert Insights

Related Content

Cybercrime

A recently disclosed vBulletin vulnerability, which had a zero-day status for roughly two days last week, was exploited in a hacker attack targeting the...

Cybercrime

The changing nature of what we still generally call ransomware will continue through 2023, driven by three primary conditions.

Cybercrime

As it evolves, web3 will contain and increase all the security issues of web2 – and perhaps add a few more.

Cybercrime

Luxury retailer Neiman Marcus Group informed some customers last week that their online accounts had been breached by hackers.

Cybercrime

Zendesk is informing customers about a data breach that started with an SMS phishing campaign targeting the company’s employees.

Cybercrime

Patch Tuesday: Microsoft calls attention to a series of zero-day remote code execution attacks hitting its Office productivity suite.

Artificial Intelligence

The release of OpenAI’s ChatGPT in late 2022 has demonstrated the potential of AI for both good and bad.

Cybercrime

Satellite TV giant Dish Network confirmed that a recent outage was the result of a cyberattack and admitted that data was stolen.