Site icon MacDailyNews

Malvertising: Unscrupulous website ads again auto-redirecting users to App Store from Safari

“Website advertisement companies have found a way to circumvent the protections introduced in iOS 8 to stop users from being kicked to the App Store because of certain cleverly-coded JavaScript advertisements,” Benjamin Mayo reports for 9to5Mac.

“I am now experiencing this myself, and it makes browsing on the iPhone unusable. Browsing to websites such as Reddit and Reuters and others now automatically open the App Store… It’s unclear why this has started happening to me (it wasn’t happening yesterday and not everyone experiences it), but Twitter searches show that is also affecting others. It’s basically impossible for me to browse the web on my phone due to this. Using alternate browsers has no effect. Disabling JavaScript stops this from happening, but that isn’t really feasible as many websites rely on JavaScript to function, so it doesn’t really count as a reasonable solution,” Mayo reports. “This flared up as a serious issue last year, when users found they were being taken to random App Store pages without granting any kind of permission.”

“In iOS 8 beta 2, Apple supposedly had remedied the issue: ‘Safari now blocks ads from automatically redirecting to the App Store without user interaction.’ However, it seems that ad companies have now managed to work around these safeguard,” Mayo reports. “This is Apple’s problem to fix, not an attack on the websites… All of these websites use third-party networks that are outside of their control — it’s not their decision to cause the redirections. We’ve reached out to Apple for comment on the issue.”

Read more in the full article here.

MacDailyNews Take: Okay, so we’ve obviously been through this before, so we’ll refer you to this post for more info if you haven’t seen it, yet:

Shady app install ads automatically redirecting mobile users to App Store, Google Play – January 16, 2015

For some time now, we’ve been doing what we can, at a cost to the site, by turning off entire ad networks and having affected users report back if the rogue redirects have stopped or not (it’s not happening to everybody; in fact, we can’t replicate the problem on any of our iOS devices. We’re going to try Reddit and Reuters to see if we can trigger them there via Safari for iOS). We also can see what’s happening in our Inbox. When the flow of complaints that accuse us of being “stupid fscking greedy bastards” cease (those are the “nice” ones), then we know we’ve hit upon an issue.

Currently, as of Monday evening, we think we’ve got these ad networks isolated (off) and the redirects have stopped (or slowed) according to our helpful readers (like Dominick P., for one prominent example – thanks, Dominick for all your help on this!) and because the email missives have ceased.

Again, as Mayo reports, we’re not causing these redirects. Reddit is not causing the redirects. Neither is Reuters. Beyond Apple’s responsibility for their users’ experience, the third-party ad networks really need to get a handle on this and vet who they allow into their systems. Right now, some of these networks are infiltrated by criminals who are spreading malvertising. If they fail to clean up their acts, these ad networks will lose publishers, and eventually their businesses.

If you experience an auto redirect while browsing MacDailyNews.com via Safari on your iPhone, iPad, or iPod touch, please drop us a friendly email, so we know that they’re back and we can try to block them.

You can stop this from happening in your browser of choice on your iOS device by enabling Guided Access in Settings>General>Accessibility. This will prevent the App Store from being launched out of Safari unless you want it to do so.

In closing, this continues to be an absolutely lovely experience all around and we hope it ends sooner than later. Please, Apple, save us if you can!

Related article:
Shady app install ads automatically redirecting mobile users to App Store, Google Play – January 16, 2015

Exit mobile version