Cyber Risks · Krebs on Security

Who’s Tracking You? Use This New Service to Find Out

Summary: A free service called DecryptAds launched to scrape and cross-reference the ads.txt, app-ads.txt, and buyers.json/sellers.json files that websites and apps publish, making adtech partner data easier to parse. A search on espn.com showed 143 ad partners and 19 registered data broker domains, with almost half of those brokers collecting geolocation data from visitors who do not block ads.

Bottom line: DecryptAds reports that Between Digital, flagged as a Russian firm processing publisher offers through sanctioned Alfa Bank, is collecting ad data on approximately 55,000 partner websites and serves ads on top U.S. military news sites including armytimes.com and defensenews.com. Edwards says the supply chain object that would identify who served a malicious ad is only shared server-side, so without it organizations hit by malvertising cannot trace who targeted their people.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related