Any DNS based blocker will filter out anything from URLs at the source, so no data is received. I use AdAway with Magisk. Blocklists are updated regularly.
Comment on Spyware can infect your phone or computer via the ads you see online – report
NaibofTabr@infosec.pub 9 months ago≥ What sets Insanet’s Sherlock apart from Pegasus is its exploitation of ad networks rather than vulnerabilities in phones. A Sherlock user creates an ad campaign that narrowly focuses on the target’s demographic and location, and places a spyware-laden ad with an ad exchange. Once the ad is served to a web page that the target views, the spyware is secretly installed on the target’s phone or computer.
This is the part that makes this newsworthy. Insanet uses the advertising infrastructure to target a specific group or even person, and when the ad is displayed it does not require user interaction to install itself. They’ve developed a zero-click exploit, which is very concerning
I’m not clear on whether an adblocker will actually protect you from this - some adblockers only prevent the display of the ad in your browser, but the content of the ad is still downloaded with the rest of the webpage information. You might actually need something like Pihole to block ad server addresses so that the content never gets downloaded at all, but that would make any browsing outside your home network dangerous.
MasterBuilder@lemmy.one 9 months ago
newIdentity@sh.itjust.works 9 months ago
Most do both and also block the Javascript of the ad to load.
furrowsofar@beehaw.org 9 months ago
This is the crazy thing about ads. The ad network and site operators should be responsible for making sure both the ads and the people putting up the ads are trustworthy. The reason I now block all ads is this reason. Neither party cares and they are willing to act as a conduit for this stuff. In most other industries orgs are responsible forvtgeir supply chains.
NaibofTabr@infosec.pub 9 months ago
Ah, but see that would require actual human attention and judhemebt for the vetting process, which would cost money. Automating the ad selling process is so much better… for the shareholders.
furrowsofar@beehaw.org 9 months ago
There are plenty of ways. They probably just do not want to do it. Easiest might be only certain allowed formats and all the content must begin the ad networks servers. They could allow more options for vetted business partners.
NaibofTabr@infosec.pub 9 months ago
The problem with this is that I can label a file any format I want, because ultimately the file is just a string of binary. A lot of file formats use embedded headers to make them identifiable regardless of label or metadata, but it’s completely possible to fake those. I could even give you an image file that is malware, which would be difficult to identify until it actually did something malicious.
I think to be sure, you’d have to basically detonate every ad file in a sandbox environment to see if it tried do anything unexpected, which would be… less than simple. You’d have to check it across every major browser and OS, because it might only operate on specific systems.