Malvertising could be used to capitalize on upcoming elections. Citizens should be alert, aware and forewarned.
Malvertising: What Is It?
Malvertising is a portmanteau for malicious software, also known as malware and advertising. Malvertising describes the concept whereby cyber criminals target victims through ads to execute spyware, ransomware and "drive-by downloads.”
In malvertising, threat actors buy advertising space on legitimate sites and post ads that redirect to pages containing malicious software and exploit kits that deploy on a user's device.
In an August 2023 report, Statista researchers projected a 35% to 50% increase in malvertising in 2023 alone. Victims of malvertising could experience breached devices, compromised financial and email accounts, exploitation of sensitive data and financial loss.
In instances of "drive-by" malvertising, threat actors have compromised a website. Malicious code hijacks legitimate ads and the malware runs without the user's knowledge, consent or interaction. Simply visiting the site deploys malware, putting the device at risk.
Most think exploit kits are only deployed on seedy, unknown websites; however, it is reported that notable sites have inadvertently displayed advertising, including those of The New York Times, Yahoo, Spotify, eBay and the London Stock Exchange.
According to a Threatpost report, in 2018, a malvertising campaign hijacked 300 million browser sessions in 48 hours. It injected malicious code into legitimate ads and web pages, redirecting users to malicious sites and defrauding them of approximately $1 million in 2 days.
Confiant, a security firm that tracks cyber threats, reported that malware threat group eGobbler infected over 1 billion ads between August and September 2021. This malvertising targeted iOS and desktop users of Chrome and Safari browsers.
Malvertising on Social Media
Malvertising deployed on social media sites could use social engineering tactics to dupe users. Social media platforms gather extensive user data, allowing malvertisers to target specific demographics with precision.
The personalized nature of social media content makes it easier for malvertisers to craft ads that resonate with user interests, preferences or behaviors. This is where politics and elections become lures and bait for unsuspecting citizens.
The Compounding Effects and Potential Impacts on Elections
With U.S. elections fast approaching, we should be aware that malvertising campaigns could use deepfake video, sensational headlines and AI-generated images of politicians or governmental agencies as clickbait to encourage interaction with malvertisements.
Politically related malvertisements could have a compounding effect because they could potentially deliver misinformation and disinformation campaigns via deepfake images, videos and misleading headlines associated with political candidates and the election process.
As revealed in my previous Newsmax Insider InfoSector article, "Remain Alert, Aware: Deepfakes Could Reshape Politics," politically motivated deepfakes could potentially create false narratives, misrepresent candidate statements or fabricate endorsements. In the article, I outline documented cases of deepfakes that reportedly impacted political campaigns around the globe, including Turkey, India and the leaders of Ukraine and Russia.
Cybercriminals could intentionally or inadvertently attempt to undermine elections by designing malvertisements containing misleading information about candidates, voting procedures or election dates seeking to prompt user interaction to deploy ransomware or spyware. Such malvertisements could potentially target specific populations to influence or manipulate behavior in addition to deploying malicious payloads.
We should also not dismiss that malvertisements could be part of state-sponsored operations to interfere with foreign elections. State-sponsored actors could purposely deploy malvertising to amplify propaganda, influence public opinion and destabilize democratic processes in other countries.
Protecting Yourself From Malvertising
With this said, how does one protect against such devious operations?
Software Updates
Ensure that software is updated on devices. Malvertising often exploits vulnerabilities in outdated software. Update your operating system, applications and web browsers with the latest security patches.
Ad Blockers
Ad blockers prevent ads from displaying or remove them altogether, reducing the risk of receiving malvertisements and redirects to malicious websites.
Antivirus Software
Install a reputable antivirus program on devices and promptly approve updates. Often, updates are designed to protect against specific malware, including malvertising.
Be Wary of Links
Avoid clicking suspicious, sensational or intrusive ads. If the topic interests you, visit a trusted site to ensure the validity of the information. Verify information before sharing.
Education
The first step is awareness. Educate friends and family that risk exists. The more informed we are, the better we can become at not falling prey.
Protecting yourself and protecting our electoral process could be one and the same. It will take a coordinated effort on behalf of organizations, cybersecurity experts and citizens to promote awareness of potential threats and to collaborate on implementing robust security measures to safeguard citizens and electoral systems from malvertising-related risks.
The risks are layered, but the warning is clear. Think before you click. Verify before forwarding.
Each of us can play a small part in creating a fortified defense for our nation's security and ensuring the democracy of America for generations to come.
V. Venesulia Carr is a former United States Marine, CEO of Vicar Group, LLC and host of "Down to Business with V.," a television show focused on cyberawareness and cybersafety. She is a speaker, consultant and news commentator providing insight on technology, cybersecurity, fraud mitigation, national security and military affairs. Read more of her reports — Here.