在ChromeBrowser 有安裝AdBlocker 既人要注意啦！
【駭侵事件】研究發現，超過2000萬個Chrome用戶安裝了惡意偽冒廣告攔截器(ad blocker)
瀏覽器外掛中，廣告攔截程式(Ad blocker)在幫助用戶安全瀏覽網路發揮重要的作用，同時不會因為在關閉彈出式廣告而被重導向到用垃圾郵件轟炸用戶的詐騙網站。
目前在桌上型電腦和移動設備上有超過10億人正在使用的Chrome瀏覽器，在資安公司研究報告中揭露，Chrome瀏覽器就像是大量偽冒外掛程式的集散地，尤其是惡意的廣告攔截器，根據說法，由於Chrome網路商店的安全性管控不佳，目前有超過2000萬的Chrome用戶在其瀏覽器上安裝了偽造的廣告攔截器外掛程式。
這些偽冒外掛程式的主要例子之一就是擁有超過1000萬用戶的Google Chrome瀏覽器外掛「AdRemover」。在進一步的檢查中，Adguard研究人員發現了兩個包含混淆腳本的.txt檔案，可以追蹤由受害者瀏覽器發出的每個request。
研究人員將其標記為一個由數百萬個受感染瀏覽器所組成的「natural botnet」，它可以或已經被用來竊取Chrome用戶的個人資料，並將其發送到疑似命令與控制伺服器(C&C)。
這個隱藏的腳本除監聽瀏覽器發出的請求外，並以MD5(url +"％Ujy％BNY0O")比較從coupons.txt加載的簽名列表。當所述簽名被命中時，便從domaing.qyz.sx加載一個iframe，傳遞被訪問頁面的相關資訊，然後重新初始化該外掛。例如，其中一個簽名與https://www.google.com/相對應
此外，Chrome網路商店上還有其他四款假廣告攔截器遵循與AdRemover外掛程式相同的模式。偽冒的惡意Adblockers列表如下：
Webutation(目前由超過30,000名用戶安裝)
HD for YouTube(目前由超過40萬用戶安裝)
Adblock Pro(目前由超過200萬用戶安裝)
uBlock Plus(目前由超過800萬用戶安裝)
Google Chrome的AdRemover(目前由超過1000萬用戶安裝)
●該資安公司已經向Google通知Chrome網路商店上存在惡意Adblockers的情況，但是在發佈時，所有上述外掛程式仍可安裝使用。因此，如果用戶正在使用這些Adblocker中的任何之一，建議立即移除以免遭駭客利用。
參考連結：
[1]https://www.hackread.com/20-million-chrome-users-have-inst…/
[2]https://blog.adguard.com/…/over-20-000-000-of-chrome-users…/
更多【駭侵事件】請參考 https://www.twcert.org.tw/subpa…/securityInfo/hackevent.aspx
ublock adblock比較 在 [新聞] Adblock Plus一年內失去數百萬使用者- 看板Browsers 的推薦與評價
Firefox: Adblock Plus lost millions of users in the past year
https://www.ghacks.net/2017/09/29/firefox-adblock-plus-lost-millions-of-users-in-the-past-year/
Adblock Plus is the most popular content blocking add-on for the
Mozilla Firefox web browser. In fact, it is the most popular
add-on for Firefox by a large margin.
Its more than 14 million users beat second placed uBlock Origin by
more than 10 million users right now. But things are not super
great if you take a look at how Adblock Plus' user count developed
over the past year.
A quick check reveals that the add-ons daily average user count
and daily downloads are down. An average of 21.4 million users
used Adblock Plus daily on September 29th, 2016. Additionally, the
add-on was downloaded 181,000 times on that day alone.
One year later, daily users are at 15.4 million on September 27th,
2017, and daily downloads at 89,000. That is a decrease of about
six million users in a year's time, and a drop in daily downloads
by 92,000 when compared to the stats a year ago.
https://cdn.ghacks.net/wp-content/uploads/2017/09/adblock-plus-usage-stats.png
One could argue that Firefox usage may be down as well, and that
the drop in daily users and downloads is caused by that more than
anything else. But this would mean that other add-ons should see
similar drops in usage.
If you take a look at the uBlock Origin statistics, the second
most popular add-on on Mozilla AMO right now, and a content
blocker as well, you will notice that the add-ons stats are up.
On September 29th, 2016, uBlock Origin had about 1.5 million daily
users, and about 22,000 daily downloads. One year later, on
September 27th, 2017, those figures rose to 4.1 million daily
users and 55,000 daily downloads.
The add-on managed to more than double its user base and daily
downloads in a year's time.
https://cdn.ghacks.net/wp-content/uploads/2017/09/ublock-origin-stats.png
To be fair, uBlock Origin's daily downloads jumped shortly after
September 29th, and have actually dropped heavily at the end of
June and recovered only recently.
The huge uptick of downloads at the end of August seems to
correlate with the release of the WebExtensions versions of uBlock
Origin. Similarly, Adblock Plus managed to increase its daily
downloads at around the same time, but both download counts did
fall to previous levels shortly thereafter.
To come back to the initial question: why did Adblock Plus's daily
user number drop by several million users while similar
extensions did not see a drop but an increase instead?
Lets take a look at possible explanations:
Adblock Plus's Acceptable Ads program might be a reason. While
it is possible to disable the program in Adblock Plus, some users
may have had troubles doing so, or made the decision to move to
another content blocker instead.
Rise in popularity of uBlock Origin which may have had an
impact on Adblock Plus's performance. Interest in Adblock Plus
dropped slightly according to Google Trends, but uBlock Origin
interest increased only slightly however.
It is likely that uBlock Origin gained users who migrated from
Adblock Plus to the new extension, but this does not explain what
the remaining millions of users did. Could it be a change in
reporting on Mozilla AMO?
備註：
AdBlock Plus使用數從去年九月底的21.4M → 15.4M，
而uBlock Origin 1.5M → 4.1M
可能原因: 1. ABP的廣告允許計畫 2.因為uBlock Origin支援了WebExtension
--
※ 發信站: 批踢踢實業坊(ptt.cc), 來自: 216.218.222.12
※ 文章網址: https://www.ptt.cc/bbs/Browsers/M.1507184596.A.D43.html
Network filters: 在要求送出前過濾掉
Hosts file: (uB0特有) 同上
Cosmetic filters: 細分成
1.Specific cosmetic filters-在渲染前過濾掉
2.Generic cosmetic filters-渲染後過濾 你看到的一閃 ABP跟uB0皆會發生
3.Cached generic cosmetic filters(uB0特有)-第2點第一次發生後快取 往後便
會渲染前過濾
... <看更多>