Slashdot Mirror

← Back to Stories (view on slashdot.org)

Hijacked Web Traffic For Sale

Posted by timothy on from the 1-crying-young-spying-young-viewer-for-sale dept.

mask.of.sanity writes "If you can't create valuable content to attract users to your site, Russian cyber criminals will sell them to you. A web store has been discovered that sells hacked traffic that has been redirected from legitimate sites. Sellers inject hidden iframes into popular web sites and redirect the traffic to a nominated domain. Buyers purchase the traffic from the store to direct to their sites and the sellers get paid."

4 of 68 comments (clear)

  1. Uhm... by martin-boundary · · Score: 4, Informative

    Isn't this what websites do all the time with ads, and Facebook and Google+ buttons? It's not like I personally agree to send my traffic to Facebook when the button shows up on a random webpage, and visiting all those ad servers incidentally just slows down my web browsing for no good reason.

    1. Re:Uhm... by Pieroxy · · Score: 5, Informative

      ?

      You only "send your traffic" to facebook, if you choose to click on the link to Facebook.

      Aaaaand, congratulations! You don't know how the Web works.

      Whenever you see the "Like" facebook button, you browser has made several HTTP request to facebook and run facebook hosted scripts on your page. And if you're logged in to facebook on that computer, facebook has recorded the fact that YOU went to that page.

      All of that without clicking on the button, courtesy of the website owner.

      --
      Write boring code, not shiny code!
    2. Re:Uhm... by trancemission · · Score: 5, Informative

      You only "send your traffic" to facebook, if you choose to click on the link to Facebook.

      ?

      Wrong. Many sites share information on their visitors to 3rd parties, this allows said 3rd parties to track and profile you. You do not have to click a link, it happens in the background.

      Use this to find out who the main players are: http://www.ghostery.com/

      Ghostery sees the invisible web - tags, web bugs, pixels and beacons. Ghostery tracks the trackers and gives you a roll-call of the ad networks, behavioral data providers, web publishers, and other companies interested in your activity.

      And obviously ad-block plus, NoScript at al...

      Facebook specific:
      https://addons.mozilla.org/en-US/firefox/addon/facebook-blocker/?src=userprofile

    3. Re:Uhm... by kainosnous · · Score: 4, Interesting

      Very true. It's something that has bothered me for a while. I'd really rather not have Facebook and others tracking me all over the web, and yet, they usually do. Even while you're viewing this very page, there are icons for Twitter, Facebook, and Google which must be loaded from their site. IIRC, some of those ToS won't allow you to use their logo, so it has to come from their site. Even the website has a copy of the image, you still need to use their site for stats and other nifty functionality. In modern sites, that is almost always done by client side JavaScript which makes users send traffic to their site. All of that can be bypassed, but I don't know anybody who does for long.

      I think that people would be truly shocked to find out how much information they are sending about themselves, and how many sites collect it that they are unaware of. Most of that comes because of an ignorance about how the web works. What makes it sad is that most of them don't care as long as they get to chat with friends on their Facebook page.</rant>

      --
      There are 10 commandments: 01)Thou shalt love the Lord Thy God 10)Thou shalt love thy neighbour as thyself.Matt22:34-40