Microsoft disrupts fake-click malware ZeroAccess

Microsoft announced it has infiltrated a fake-click generator that cost advertisers millions each month, signaling a push back against cyber-crime from big tech companies.

Steven Senne/AP/File
A new Microsoft Corp. logo, left, is seen on an exterior wall of a new Microsoft store inside the Prudential Center mall in Boston last year.

Microsoft, the Federal Bureau of Investigation, and the European CyberCrime Center (EC3) claim to have disrupted computer botnet ZeroAccess, an army of infected computers that fraudulently charged online advertisers millions.

ZeroAccess used millions of bugged computers to create false clicks to fake websites, charging advertisers for what seemed like good ad investments. The coordinated move by Microsoft and the FBI shows an increased effort by businesses to monitor the wild World Wide Web in hopes of saving customers’ cash.

"These aren't just kids operating in their parent's basement," said Steve Sullivan, vice president of advertising technology at the Interactive Advertising Bureau, an industry group, speaking about digital ad fraud to The Wall Street Journal. "What we have here are organized crime groups in foreign countries targeting the ad world."

The malware targeted search results by including faux websites in searches on Bing, Google, and Yahoo, and then creating false clicks on said websites, charging companies for advertising space. Investigators say this cost advertisers more than $2.7 million each month.

Though investigators are unsure of who is behind ZeroAccess, Microsoft also filed a civil suit against 18 IP addresses thought to be linked to the botnets. This enabled them to block incoming and outgoing communications between US computers and those abroad thought to be benefiting off the malware.

“The coordinated action taken by our partners was instrumental in the disruption of ZeroAccess; these efforts will stop victims’ computers from being used for fraud and help us identify the computers that need to be cleaned of the infection,” says David Finn, executive director and associate general counsel of the Microsoft Digital Crimes Unit in a statement. “Microsoft is committed to working collaboratively – with our customers, partners, academic experts and law enforcement – to combat cybercrime.”

This announcement comes only weeks after Microsoft unveiled its new cybercrimes center, a section of the company devoted to investigating online fraud, hacking, and other cybersecurity issues.

And Microsoft is far from the only company thinking about cybercrime. Google’s advertising section, DoubleClick, employs more than 100 employees for security purposes and ad exchange AppNexus doubled its security forces in the last year, according to the Wall Street Journal article.

Think your computer may be infected? Microsoft also published guidelines for keeping your computer malware-free online.

You've read  of  free articles. Subscribe to continue.
Real news can be honest, hopeful, credible, constructive.
What is the Monitor difference? Tackling the tough headlines – with humanity. Listening to sources – with respect. Seeing the story that others are missing by reporting what so often gets overlooked: the values that connect us. That’s Monitor reporting – news that changes how you see the world.

Dear Reader,

About a year ago, I happened upon this statement about the Monitor in the Harvard Business Review – under the charming heading of “do things that don’t interest you”:

“Many things that end up” being meaningful, writes social scientist Joseph Grenny, “have come from conference workshops, articles, or online videos that began as a chore and ended with an insight. My work in Kenya, for example, was heavily influenced by a Christian Science Monitor article I had forced myself to read 10 years earlier. Sometimes, we call things ‘boring’ simply because they lie outside the box we are currently in.”

If you were to come up with a punchline to a joke about the Monitor, that would probably be it. We’re seen as being global, fair, insightful, and perhaps a bit too earnest. We’re the bran muffin of journalism.

But you know what? We change lives. And I’m going to argue that we change lives precisely because we force open that too-small box that most human beings think they live in.

The Monitor is a peculiar little publication that’s hard for the world to figure out. We’re run by a church, but we’re not only for church members and we’re not about converting people. We’re known as being fair even as the world becomes as polarized as at any time since the newspaper’s founding in 1908.

We have a mission beyond circulation, we want to bridge divides. We’re about kicking down the door of thought everywhere and saying, “You are bigger and more capable than you realize. And we can prove it.”

If you’re looking for bran muffin journalism, you can subscribe to the Monitor for $15. You’ll get the Monitor Weekly magazine, the Monitor Daily email, and unlimited access to

QR Code to Microsoft disrupts fake-click malware ZeroAccess
Read this article in
QR Code to Subscription page
Start your subscription today