원본 문서.pdf

Ad injection affects over 5% of unique daily IP addresses accessing Google, impacting tens of millions of users worldwide. A multi-staged pipeline identified 50,870 Chrome extensions and 34,407 Windows binaries as ad injectors, with 38% and 17% being malicious. Top ad injectors are organized as affiliate programs, and their ads are displayed on over 16,000 websites, generating millions of dollars in revenue. The ad injection ecosystem profits from over 3,000 advertisers, including Sears, Walmart, and Target, who unknowingly pay for traffic from injectors. A small number of intermediaries, such as ShopZilla and PriceGrabber, facilitate the ad injection revenue chain. The study's findings have led to the disabling of 192 deceptive Chrome extensions and the development of techniques to catch similar extensions.