Investigating Commercial Pay-Per-Install and the Distribution of Unwanted...
summary
Researchers build an analysis pipeline and sandboxed milkers that query PPI control servers, de-obfuscate response blobs, fetch and run offered binaries, and submit them to VirusTotal and filesystem/process monitors. Over a year they crawl pricing, collect ~450,000 offers (≈1,200 unique), and analyze ~1.5M binaries; results show advertisers pay $0.10–$1.50 per install, PPI drives 60 million download attempts per week, and unwanted software spreads at roughly three times the rate of typical web malware. Defensive detections and a Chrome cleanup tool find tens of millions of real infections.
AI-written summary · about
chapters (8)
- 0:00Introduction
- 0:25Background
- 2:44Behind the Scenes
- 5:23Project Overview
- 11:49Who is paying for installs
- 16:22Impact on users
- 18:52Deceptive techniques
- 22:20Questions
related talks
34mWajam: From a Start-up to Massive Spread Adware
31mWatching Commodity Malware Get Sold to a Targeted Actor
19mWhich mobile fraud solution is right for you?
30mReversing Mobile Malware
55mModern Malvertising ...
51mThe World Of Spyware For Rent
54mModern Malvertising and Malware web-based exploit campaigns
32mIt's a Jungle Out There! – Open Source Supply Chain Attacks