Besieged By Hackers, OpenX Will Close Open Ad Platform

Self-service ad platform proves indefensible when hackers come knocking.

OpenX
, a digital and mobile ad company that has received more than
$70 million in funding
from several venture capital firms including Samsung Venture Investment Corporation, has decided to abandon OnRamp, its free, self-service ad platform, because it couldnt defend against hackers.
On Monday, the company said in
a forum post
that OnRamp has been the subject of escalating hacker activity in recent months, culminating in a serious attack that occurred Saturday, February 9, 2013.
As a result of the attacks, the company suspended OnRamp, a service based on the companys open source ad-serving software, in order to conduct an investigation into the breach. The company said its paid services -- OpenX Enterprise and OpenX Market -- rely on a different code base and are unaffected. The company also said it could not predict when or whether it would restore OnRamp service.
On Tuesday, it became clear that OnRamp will not be revived. Characterizing the breach as a serious malicious hacker intrusion, the company said in
a follow-up forum post
that the increased frequency of malicious hacking has made it virtually impossible to keep OnRamp secure in an environment of increasingly sophisticated and powerful intrusions that exploit open source software.
[ Can hackers power cause dead bodies to rise from the grave? See
Zombie Alert Hoax: Emergency Broadcast System Hacked
. ]
Malicious advertising, or malvertising, is not a new phenomenon, but it doesnt typically result in complete surrender.
However, recent vulnerabilities in Java have helped hackers distribute malware through ad networks. Security firm Trusteer last month published a report detailing how a malvertising campaign distributed Blackhole exploits kits through ads carried on the Clicksor network.
Using Clicksor as the malvertising platform allows hackers to reach a very wide audience, while allowing the hacker to distribute the malware at a very low cost (starting at $0.50 per 1,000 impressions),
Trusteer said in a blog post
. Clicksor (and other legitimate online advertising services) has no idea, of course, that these legitimate looking, paid advertisements contain malware.
Exploit kits like Blackhole are regularly updated to include code that exploits newly discovered vulnerabilities. As a consequence, Internet users with vulnerable browsers may see their systems compromised when visiting Web pages that display ads carrying these exploit kits.
Ashkan Soltani
, an independent security researcher who previously served as staff technologist at the Federal Trade Commission, observed in an email that malvertising appeals to hackers because its a far more efficient way to distribute malware than trying to hack websites on an individual basis. He likened it to poisoning the reservoir.
Soltani also questioned the notion that the openness of OnRamps service doomed it. Googles ad platform is an open system where anyone can submit ads but we dont see anywhere near the amount of abuse, he said.
OpenX declined to comment beyond the forum posts it published. The company plans to reactivate OnRamp next Tuesday to allow customers to access and export their data, but not to serve ads. On Friday, March 22, 2013, at 5:00 p.m. Pacific Time, OnRamp will be shut down permanently.

Last News
▸ ArcSight prepares for future at user conference post HP acquisition. ◂ Discovered: 07/01/2025 Category: security	▸ Samsung Epic 4G: First To Use Media Hub ◂ Discovered: 07/01/2025 Category: security	▸ Many third-party software fails security tests ◂ Discovered: 07/01/2025 Category: security

**Cyber Security Categories**
Google Dorks Database	Exploits Vulnerability	Exploit Shellcodes

CVE List

Tools/Apps

News/Aarticles

Phishing Database

Deepfake Detection

Trends/Statistics & Live Infos

Tags:
Besieged By Hackers, OpenX Will Close Open Ad Platform