Menu
SweetCAPTCHA users complain of advertising pop-ups

SweetCAPTCHA users complain of advertising pop-ups

A script inside the CAPTCHA tool is displaying pop-ups, which could lead to harmful software

Website owners are complaining that a security tool designed to stop abuse, SweetCAPTCHA, is showing advertising-related pop-ups.

Website owners are complaining that a security tool designed to stop abuse, SweetCAPTCHA, is showing advertising-related pop-ups.

Website owners are complaining that a free security tool started displaying unwanted advertising pop-ups to their visitors.

The tool is made by SweetCAPTCHA. It requires users to correctly pick out and match images before they're allowed to do some action on a website. CAPTCHAs are intended to prevent abuse by spammers and automated registrations by web bots.

SweetCAPTCHA was busy Tuesday fielding complaints on Twitter from some who noticed a script that was injecting the pop-up ads. Sucuri, a security company, said the pop-ups promote tech support schemes and bogus dating sites.

Sucuri analyzed SweetCAPTCHA's JavaScript and saw it sometimes loads a script from "clktag.com." The Web page for that domain says it is used for serving advertisements for the RevenueHits Ad Network.

SweetCAPTCHA doesn't mention advertising in its website's FAQ. But the company's terms of use says the tool may include third party content, such as ads, banners and links, wrote Denis Sinegubko, a senior malware researcher with Sucuri.

He followed the chain of redirects to other domains triggered by the advertising script in SweetCAPTCHA on a Windows machine, and ended up seeing a pop-up window asking for permission to install an application called the "Media Player HD." Some antivirus engines flag that program as either a trojan or a potentially unwanted program, he wrote.

Using a Linux computer, he saw pages that advertised either a dating site or a tech support scheme. "So the answer is: Yes, the SweetCAPTCHA script is responsible for unwanted and potentially malicious pop-ups," he wrote.

SweetCAPTCHA officials couldn't be immediately reached for comment. On Twitter, SweetCAPTCHA was telling website owners to let them know the addresses of their sites so the issues could be investigated.

The insertion of third-party scripts into software tools is nothing new and brings revenue to developers, Sinegubko wrote. But when many multiple third parties are allowed to load arbitrary content in the tools, the chances that malicious content may be inserted are greater, he wrote.

Send news tips and comments to jeremy_kirk@idg.com. Follow me on Twitter: @jeremy_kirk


Follow Us

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.

Tags securityinternetadvertisingSucuriSweetCAPTCHA

Featured

Slideshows

Meet the leading female front runners of the Kiwi channel

Meet the leading female front runners of the Kiwi channel

Reseller News honoured the leading female front runners of the New Zealand channel at the 2018 Women in ICT Awards (WIICTA) in Auckland. The awards honoured standout individuals across seven categories, spanning Entrepreneur; Innovation; Rising Star; Shining Star; Community; Technical and Achievement.

Meet the leading female front runners of the Kiwi channel
Meet the top performing customer-centric Microsoft channel partners

Meet the top performing customer-centric Microsoft channel partners

Microsoft honoured leading partners across the channel following a year of customer innovation and market growth in New Zealand. The 2018 Microsoft Partner Awards recognised excellence within the context of the end-user, spanning a host of emerging and established providers.

Meet the top performing customer-centric Microsoft channel partners
Reseller News launches new-look Awards at 2018 Judges’ Lunch

Reseller News launches new-look Awards at 2018 Judges’ Lunch

Introducing the Reseller News Innovation Awards, launched to the channel at the 2018 Judges’ Lunch in Auckland. With more than 70 judges now part of the voting panel, the new-look awards will reflect the changing dynamics of the channel, recognising excellence across customer value and innovation - spanning start-ups, partners, distributors and vendors.

Reseller News launches new-look Awards at 2018 Judges’ Lunch
Show Comments