New malvertizement featuring Nielsen/NetRatings

Yet another big name is being impersonated via a malvertizement.

The Nielsen malvertizement reveals a new malicious domain, xp-vista-update.net, hosted in Russia with name servers provided by the infamous estboxes.

The domain was created on 25 March 2008.

The malicious URL is xp-vista-update.net/?id=244400121 (currently redirecting to Google).

Here are screenshots of the malvertizements:

 image

   image

   image

 

 

 

 

 

 

 

Published Wednesday, April 23, 2008 8:30 AM by sandi
Filed under: , , ,

Comments

# re: New malvertizement featuring Nielsen/NetRatings

Friday, August 08, 2008 10:36 AM by Chris Thornton

Thanks for posting this. I had my clipboard go crazy last night, and I knew right away, because I write clipboard software (ClipMate) and so I was able to "hear" the clipboard events. This thing was posting more than once a second - overwriting the clipboard with their silly URL.  I think they hope that people inadvertently paste it into blog posts, comments (like this one), e-mail, and such.

I have posted my findings here:

www.thornsoft.com/.../viewtopic.php

# re: New malvertizement featuring Nielsen/NetRatings

Saturday, August 09, 2008 3:23 PM by Marilyn

Hi I'm running on a mac and I have this... I have no idea how to get rid of it.