Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Cybercrime

Users Warned of Malware After Ads Reported on Wikipedia Site

Wikimedia, the foundation responsible for information hub Wikipedia, is warning users that if they see ads on the encyclopedia’s webpage, their system might be infected with malware. The ads in question are not the ones asking for donations that show up once a year, but for-profit related adverts.

Wikimedia, the foundation responsible for information hub Wikipedia, is warning users that if they see ads on the encyclopedia’s webpage, their system might be infected with malware. The ads in question are not the ones asking for donations that show up once a year, but for-profit related adverts.

“We never run ads on Wikipedia. Wikipedia is funded by more than a million donors, who give an average donation of less than 30 dollars. We run fundraising appeals, usually at the end of the year. If you’re seeing advertisements for a for-profit industry or anything but our fundraiser, then your web browser has likely been infected with malware,” Wikimedia’s Philippe Beaudette wrote on the foundation’s blog.

“Ads injected in this manner may be confined to some sites, even just to Wikipedia, or they may show up on all sites you visit. Browsing through a secure (HTTPS) connection may cause the ads to disappear, but will not fix the underlying problem…”

The blog post mentioned additional causes for the ads, including hijacked browsers, which have been taken over by toolbars that display ads within websites or injected advertisements that come from an ISP.

Disabling browser add-ons is the first step to determining the issue, but if the system is infected with malware that wont remove the underlying problem. Obviously, using anti-virus software will help, but most AV programs allow toolbars.

It’s only recently that some browser add-ons are being blocked or disabled due to the fact that they inject content through the browser, which is often seen as a malicious act. However, more often than not, browser toolbars are legitimately installed. They often come packaged within Shareware or Trialware installations.

Advertisement. Scroll to continue reading.

Some are shady, such as the “I Want This” toolbar for Chrome, which Wikimedia mentions in their post on the topic. The distributers of “I Want This” earn money from affiliate marketing and ad distributions. Other toolbars are useful, such as WOT, which rates search results and websites based on community reports of trustworthiness.

No matter what though, “you won’t be seeing legitimate advertisements on Wikipedia,” added Beaudette.

Written By

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Today’s attackers are no longer breaking in — they’re logging in. Join this live webinar as we break down the modern identity attack chain and examine how recent breaches exploited weaknesses in authentication, identity verification, and access management processes.

Register

AI has accelerated both sides of the fight. Adversaries are weaponizing vulnerabilities faster, while defenders are racing to ship detections and configurations. Join this live webinar as we explore how to prove your controls actually hold against new threats, map your security maturity, and unite breach simulation with automated pentesting into a single, coordinated program.

Register

People on the Move

Stephen Garcia has been named Chief Information Security Officer at BreachRx.

Kasper Lindgaard has been appointed Vice President of Security Strategy at CoreView.

Chaim Mazal has been named Chief Information Security Officer at GitLab.

More People On The Move

Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.