Menu
SweetCAPTCHA users complain of advertising pop-ups

SweetCAPTCHA users complain of advertising pop-ups

A script inside the CAPTCHA tool is displaying pop-ups, which could lead to harmful software

Website owners are complaining that a security tool designed to stop abuse, SweetCAPTCHA, is showing advertising-related pop-ups.

Website owners are complaining that a security tool designed to stop abuse, SweetCAPTCHA, is showing advertising-related pop-ups.

Website owners are complaining that a free security tool started displaying unwanted advertising pop-ups to their visitors.

The tool is made by SweetCAPTCHA. It requires users to correctly pick out and match images before they're allowed to do some action on a website. CAPTCHAs are intended to prevent abuse by spammers and automated registrations by web bots.

SweetCAPTCHA was busy Tuesday fielding complaints on Twitter from some who noticed a script that was injecting the pop-up ads. Sucuri, a security company, said the pop-ups promote tech support schemes and bogus dating sites.

Sucuri analyzed SweetCAPTCHA's JavaScript and saw it sometimes loads a script from "clktag.com." The Web page for that domain says it is used for serving advertisements for the RevenueHits Ad Network.

SweetCAPTCHA doesn't mention advertising in its website's FAQ. But the company's terms of use says the tool may include third party content, such as ads, banners and links, wrote Denis Sinegubko, a senior malware researcher with Sucuri.

He followed the chain of redirects to other domains triggered by the advertising script in SweetCAPTCHA on a Windows machine, and ended up seeing a pop-up window asking for permission to install an application called the "Media Player HD." Some antivirus engines flag that program as either a trojan or a potentially unwanted program, he wrote.

Using a Linux computer, he saw pages that advertised either a dating site or a tech support scheme. "So the answer is: Yes, the SweetCAPTCHA script is responsible for unwanted and potentially malicious pop-ups," he wrote.

SweetCAPTCHA officials couldn't be immediately reached for comment. On Twitter, SweetCAPTCHA was telling website owners to let them know the addresses of their sites so the issues could be investigated.

The insertion of third-party scripts into software tools is nothing new and brings revenue to developers, Sinegubko wrote. But when many multiple third parties are allowed to load arbitrary content in the tools, the chances that malicious content may be inserted are greater, he wrote.

Send news tips and comments to jeremy_kirk@idg.com. Follow me on Twitter: @jeremy_kirk


Follow Us

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.

Tags internetadvertisingSucuriSweetCAPTCHA

Featured

Slideshows

The making of an MSSP: a blueprint for growth in NZ

The making of an MSSP: a blueprint for growth in NZ

Partners are actively building out security practices and services to match, yet remain challenged by a lack of guidance in the market. This exclusive Reseller News Roundtable - in association with Sophos - assessed the making of an MSSP, outlining the blueprint for growth and how partners can differentiate in New Zealand.

The making of an MSSP: a blueprint for growth in NZ
Reseller News Platinum Club celebrates leading partners in 2018

Reseller News Platinum Club celebrates leading partners in 2018

The leading players of the New Zealand channel came together to celebrate a year of achievement at the inaugural Reseller News Platinum Club lunch in Auckland. Following the Reseller News Innovation Awards, Platinum Club provides a platform to showcase the top performing partners and start-ups of the past 12 months, with more than ​​50 organisations in the spotlight.​​​

Reseller News Platinum Club celebrates leading partners in 2018
Meet the top performing HP partners in NZ

Meet the top performing HP partners in NZ

HP has honoured its leading partners in New Zealand during 2018, following 12 months of growth through the local channel. Unveiled during the fourth running of the ceremony in Auckland, the awards recognise and celebrate excellence, growth, consistency and engagement of standout Kiwi partners.

Meet the top performing HP partners in NZ
Show Comments