Mikko Kotila

Topics

Security research

Malvertising, botnets, and the research that exposes them.

11 essays, 2015–2016.

Essays11

  1. If DDoS attacks trigger ads, does it mean the attacker is the target?

    But wait, if DDoS attacks can trigger ads on the target site, and sites make money from ads (and mostly only ads), whose the target? TL;DR Yes.

    · 8 min

  2. Busting Malvertising Myths – How Malware Enters the Online Advertising Supply-Chain

    In the light of recent high profile malvertising attacks, the adtech industry is finding itself as a center of attention in respect to the ongoing malware epidemic.

    · 4 min

  3. Busting Malvertising Myths – The Role of Adtech Industry in Malvertising

    In the light of recent high profile malvertising attacks, the adtech industry is finding itself as a center of attention in respect to the ongoing malware epidemic.

    · 5 min

  4. Online Anonymity for Researchers – The Simple Edition

    Here is a simple guideline for researchers to establish a basic level of online anonymity for the purpose of disconnecting identity and physical location from research activity.

    · 4 min

  5. Comprehensive List of Major Publishers Reported in Malvertising Attacks

    This page is a collection of malvertising evidence found on major publisher sites. It is continually updated as new findings emerge. 14.3.2016 [1] answers.com zerohedge.com infolinks.com…

    · 1 min

  6. Malvertising, a Serious Threat to Internet Users, Business and Society?

    There has been a lot of talk about ad blocking in regards to how certain ad formats are annoying internet users, but not nearly enough about the threat Malvertising and leaving it unchecked…

    · 3 min

  7. On the Importance of Fostering Good Communication with Security Researchers

    Ad fraud is the biggest cybercrime, yet it gets almost no attention from security researchers.

    · 10 min

  8. A Comprehensive List of Dynamic DNS (DDNS) Vendors

    While we are working on a comprehensive list of domains associated with DDNS traffic, here is a list of over 100 Dynamic DNS vendors with various levels of information available on the…

    · 1 min

  9. Golden Age of Windows XP Based Botnets Just Started

    In the below announcement Microsoft steps down from providing support for Windows XP. This announcement was initially made in early 2014…

    · 1 min

  10. Why Ad Companies Should Not Use a Cease and Desist with Security Researchers

    Because most of the ad companies are small, independent security researchers have not dedicated much time to analyse the industry and the many companies of the industry.

    · 1 min

  11. Botlab patch #1: block AWS IP ranges entirely

    Advertising that is delivered to Amazon instances are non-human traffic 100% of the cases and pose a real threat to the integrity of investments advertisers, investors and suppliers are…

    · 3 min