2 ms·
The followup https://www.seroundtable.com/google-adsense-auto-redirect-bug-19720.html https://www.seroundtable.com/google-adsense-auto-redirect-bu... mentions i
by btown 4y ago
The followup https://www.seroundtable.com/google-adsense-auto-redirect-bug-19720.html https://www.seroundtable.com/google-adsense-auto-redirect-bu... mentions it was Flash ads in 2015, which... of course they were. And not sure if it was the same instance, but also in 2015, https://www.trendmicro.com/vinfo/us/security/news/cybercrime-and-digital-threats/malicious-ads-redirect-to-flash-zero-day-exploit-affects-top-video-sharing https://www.trendmicro.com/vinfo/us/security/news/cybercrime... mentions it was a Flash zero-day that was exploited, which... of course it was.
I'd love to see if there was anything from the post-Flash era, but this certainly answers the root question.
- luckylion 4y agoI wouldn't swear on it, but I believe another wave was a few years later, 2018-ish. Not sure if Flash was still a thing back then, but Google has been allowing JS to run in ads as well (as far as I remember, at least in some formats), and someone bypassing their automated checks isn't unheard of.