Adware is any software application in which an advertising banner or other advertising material displays or downloads while a program is running. The ads are delivered through pop-up windows or bars that appear on the program's user interface. Adware is commonly created for PCs, but mobile devices may also be targeted for adware exploits.
Legitimate adware is deployed to help software developers recover development costs. It can also be used to reduce or eliminate the cost of software for users. But, in some cases, the ads contain cybersecurity threats or lead users to a malicious webpage.
Adware is placed in an existing application on a user's device via a security vulnerability. Users can also download it -- usually unknowingly. This can happen when users do one of the following:
The goal of adware is to get users to click on or otherwise engage with advertisements. Adware developers and distributors make money when users click on the online advertising that their adware serves. There is legitimate adware that users consent to, but in many cases, it is unwanted. Adware is often just a nuisance, but it can contain malicious threats.
The two main types of adware are legitimate and malicious. There is a gray area in between the two when legitimate adware unintentionally creates vulnerabilities.
Legitimate adware is downloaded with the user's express consent. Users download this form of adware knowingly and will usually get something in return. They may get a discount or free software in exchange for receiving the adware. The ads help cover the cost of developing the software or let the developer provide the product free.
For example, some software is offered either free, as an advertising-supported version, or as a paid version without advertisements. Users wanting an ad-free experience can buy the paid version.
Deceptive or abusive adware makes it difficult for the user to refuse consent or uses deceptive means to gain the user's consent. For example, it may bombard the user with unwanted advertisements or make it difficult to opt out of unwanted third-party software.
Adware is considered malicious only if it is designed with the intent of delivering malicious software to the user. However, some legal adware may unintentionally create vulnerabilities that malware can take advantage of.
Some types of malicious adware include the following:
Mobile adware infects a mobile device. Like other adware, it finds its way onto the device in one of two ways:
Some mobile adware types are more harmful than others. Adware that inundates the user with spam and pop-ups is a nuisance but is relatively harmless. Ad fraud, click fraud and ad clicker software are harmful types. They click on ads without users knowing and cause them to subscribe to premium paid services without the user's knowledge.
Some indications that a mobile or desktop device is infected with malicious adware include the following:
Mobile-device specific signs of adware include the following:
Users can manually remove adware from a device by identifying the name of the adware program and using the device's application maintenance utility to remove the program. This requires that the user know the name of the adware, which can be difficult to identify. Also, if the adware has a resuscitator, it can reinstall itself automatically even after it has been uninstalled.
Cybersecurity tools can also be used to remove adware. Most endpoint security suites have the ability to scan for and remove adware, spyware and other malware programs. A number of free software applications, such as Adaware's Ad Block, are available to help computer users identify and remove malicious programs. Pay-per-use services are also available, such as Bitdefender's Adware Removal Tool.
Prevention is the best defense against adware. To avoid infections, users should follow these guidelines:
Learn some best practices to prevent spyware infection and ways to remove it if infected.
29 Oct 2021