Connect with us

Published

on

Hackers are increasingly using online ads for malicious purposes. Often, it’s happening through routine Google searches.

These schemes are dubbed malvertising, and cyber criminals are striking more often and with increased sophistication. In fall 2023, cybersecurity software firm Malwarebytes tracked a 42% increase month-over-month in malvertising incidents in the U.S. All types of brands are being targeted, whether it’s for phishing purposes or for actual malware, said Jérôme Segura, senior director of research at Malwarebytes. “What I’m seeing is just the tip of the iceberg,” he said.

Many of these rogue ads appear as sponsored content during a search engine query on a desktop or mobile device. But malicious code can also be hidden in ads that appear on mainstream websites consumers routinely visit. Some of these ads will only ensnare consumers who click on them, but in some cases, people can be vulnerable in a more passive way — sometimes just by visiting an infected site, said Erich Kron, security awareness advocate for KnowBe4, a security awareness and training company. 

Corporate employees can also be targets of malvertising, Segura said. He cited a few actual examples that were recently uncovered involving big companies. Lowe’s staff members were targeted via a Google ad for an employee portal claiming to be associated with the retailer. Clicking on the link, “myloveslife.net,” which contains a misspelling of the company’s name, took users to a phishing page with Lowe’s logo. This had the potential to confuse employees since many don’t know offhand the URL for their internal website. “You see the brand, even the official logo of that brand, and for you it’s enough to think it’s real,” Segura said.

Segura also cited an ad meant to impersonate Salesforce-owned communication tool Slack. Initially, by clicking on the ad, he was redirected to a price page on Slack’s official website. But suspecting bad actors were at play, Segura dug deeper and uncovered an impersonation ploy, which involved trying to convince unsuspecting users to download something purporting to be the Slack app.

It’s not Google’s fault, but don’t trust it

Malvertising is not new, but cybercriminals are getting smarter and the ads are often so realistic that it’s easy to be duped. The problem is exacerbated by the fact that so many people use and trust Google as a search engine, where many of the malicious ads can be found. It’s not a problem with Google, per se; malicious ads can also show up in queries using other search engines like Microsoft’s Bing. It’s just that Google is such a widely used search engine and people trust it and let their guard down. “You see something appearing on a Google search, you kind of assume it is something valid,” said Stuart Madnick, professor of information technology at MIT Sloan School of Management. 

Consumers can also fall prey to malicious ads on trusted websites they visit regularly.  Many of these ads are legitimate, but some bad ones can slip through the cracks. “It’s like the post office. Does the mailman check every letter you get to make sure it’s really from Publishers Clearing House?” Madnick said.

Be very careful about where and when you click

Consumers can take steps to protect themselves against malvertising attempts. For instance, they should avoid clicking on sponsored links that come up during an internet search. Often, the first ad below the sponsored one will be the product they are looking for, and since it isn’t sponsored, there’s less chance of being sidelined by malicious code or a phishing attempt.

If you do click on a sponsored link, check the URL at the top of the web page to make sure it’s really where you meant to be before taking any other actions. For example, if you’re trying to visit Gap.com, make sure you’re not really on Gaps.com. Consumers who find themselves on a suspicious site should close the window immediately, said Avinash Collis, assistant professor at Carnegie Mellon University’s Heinz College. In most cases, this will avoid further trouble, he said.

Consumers also need to be careful about clicking ads they see on trusted websites, Kron said. They may, for instance, see ads for products that are much lower in cost than elsewhere. But Kron recommends not clicking and instead visiting the trusted website of the product seller. Most of the time, consumers will be able to search on the provider’s site if a special deal exists, or the deal will be highlighted on the main page of the trusted website, he said.

Also avoid calling a telephone number listed in a sponsored ad because it could be a fake telephone number. If you call it, cyber thieves could gain access to your computer or your personal information, depending on the scheme, said Chris Pierson, CEO of BlackCloak, a cybersecurity and privacy platform that provides digital executive protection for corporate executives.

Consumers should make sure they are calling a number from official product documentation they have in their possession, Pierson said. Alternatively, consumers could visit the company’s home page for this information. “Doing a [web] search could return results that are not sponsored by the company and telephone numbers that are associated with cybercriminals. All it takes to get an ad out there is money and, of course, cybercriminals that are stealing money, have the ability to pay for that bait,” Pierson said. 

Avoid ‘drive-by-downloads’

Consumers should also make sure the operating system and internet browsers are up-to-date on their computer and mobile phone. 

So-called drive-by-downloads, which can impact people who merely visit a website infected with malicious codes, generally rely on a vulnerability in the user’s browser. This is not as much of a threat for people who keep their browsers and browser extensions up-to-date, Kron said. 

Consumers could also consider installing anti-malware software on their computer and phone. Another option is to avoid ads by installing an ad blocker extension such as uBlock Origin, a free and open-source browser extension for content filtering, including ad blocking. Some consumers may also opt to install a privacy browser such as Aloha, Brave, DuckDuckGo or Ghostery on their personal devices. Many privacy browsers have embedded ad blockers; consumers may still see sponsored ads, but they will see fewer of them, which minimizes the chances of malvertising. 

Consumers who come across suspicious ads should report them to the applicable search engine for investigation and removal if deemed malicious, Collis said. This can help protect other people from being ensnared. 

Proper safety precautions are especially important since there are millions of ads on the internet and cyber thieves are relentless. “You should assume that this could happen to you no matter how careful you are,” Madnick said.

Continue Reading

Technology

Amazon introduces Amelia, an AI assistant for third-party sellers

Published

on

By

Amazon introduces Amelia, an AI assistant for third-party sellers

Amazon parcels are prepared for delivery at Amazon’s Robotic Fulfillment Centre.

Nathan Stirk | Getty Images

Amazon is rolling out an artificial intelligence tool designed to help third-party sellers quickly resolve issues with their accounts and fetch sales and inventory data.

The company said Thursday that it’s launching the product, called Amelia, in beta for select U.S. sellers, before introducing it more broadly later this year. Amazon describes it as an “all-in-one, generative-AI based selling expert,” and is making it accessible through Seller Central, the internal dashboard for third-party merchants.

Amelia is the latest generative AI tool that Amazon has brought to market in the past year as it seeks to capitalize on the hype sparked by OpenAI’s ChatGPT. The company has introduced an AI-powered shopping assistant named Rufus, a chatbot for businesses dubbed Q and Bedrock, a generative AI service for cloud customers.

Amazon also plans to upgrade its Alexa voice assistant with generative AI features, CNBC previously reported, and the company has invested billions of dollars in OpenAI competitor Anthropic, its largest venture deal to date.

CEO Andy Jassy told investors earlier this year that the “generative AI opportunity” is almost unprecedented and that increased capital spending is necessary to take advantage of it.

“I don’t know if any of us has seen a possibility like this in technology in a really long time, for sure since the cloud, perhaps since the internet,” Jassy said on the company’s first-quarter earnings call in April.

Andy Jassy on stage at the 2022 New York Times DealBook in New York City, November 30, 2022.

Thos Robinson | Getty Images

Google and Microsoft have introduced rival products to try to ensure their relevance in a market that’s predicted to top $1 trillion in revenue within a decade.

AI has also become more prevalent across Amazon’s e-commerce platform. The company now displays AI-generated summaries of product reviews and it’s launched AI features for third-party sellers that can help them write listings and generate photos for ads.

Amazon also said Thursday it’s launching tools that let sellers create AI-generated video ads and use AI to write product listings in bulk based on their entire catalog. The company said it’s beginning to use generative AI to show personalized product recommendations and listings based on a user’s shopping history. For instance, Amazon would show the term “gluten free” in the description for a box of cereal if a shopper typically searches for products with that phrase.

Amazon made the announcements at its annual conference for sellers hosted in Seattle. Third-party sellers are the heartbeat of Amazon’s dominant e-commerce business. Since about 2017, they’ve accounted for at least half of all goods sold on the site. In the second quarter of this year, that number swelled to 61%.

Dharmesh Mehta, Amazon’s vice president of worldwide selling partner services, told CNBC in an interview that a growing number of merchants are using its AI services. More than 400,000 of Amazon’s millions of third-party sellers have used its AI listing tool, up from 200,000 in June, he said.

With Amelia, Amazon is counting on generative AI to help with a key issue for third-party merchants — account troubleshooting. The company has sprawling teams that help sellers resolve account suspensions and deal with inventory issues, as well as build their business on the site. Merchants have long complained about the difficultly with getting swift resolution or reaching a human when unforeseen issues surface with their accounts.

The company said Amelia can offer help investigating an account issue and, in the future, will be able to “solve the problem on the seller’s behalf.” Mehta described how instead of filling out a form for missing inventory, a seller could ask Amelia to file a claim for them or the tool could resolve the issue automatically.

“There are going to be places where, hey, instead of chatting with seller support or getting on the phone with someone, maybe Amelia is able to do that and do that faster,” Mehta said. “I don’t need to send an email to someone and wait for a response.”

Amazon said Amelia uses Bedrock, a software tool that lets users access large language models from Amazon and other companies like Anthropic and Stability AI. Mehta said Amelia is trained on public data from the web, along with information pulled from Amazon seller resources, FAQs and other public-facing websites.

Mehta said the model isn’t trained on seller-specific data, which is closely guarded.

Amazon said the tool uses retrieval-augmented generation, or RAG, a popular AI industry framework that combines generative AI with long-established methods of information retrieval. It allows the pulling of certain seller-specific information from Amazon’s internal systems without storing it or including it in model training data.

Don’t miss these insights from CNBC PRO

Amazon is using generative AI to deliver packages faster with smarter robots and better routes

Continue Reading

Technology

Bitcoin and crypto stocks rise after the Fed cuts rates by half a percentage point

Published

on

By

Bitcoin and crypto stocks rise after the Fed cuts rates by half a percentage point

Roslan Rahman | AFP | Getty Images

Cryptocurrencies rose as part of a broad market rally Thursday, one day after the Federal Reserve delivered a half percentage point reduction in interest rates, the first in more than four years.

The price of bitcoin was recently higher by 5% at $62,417.48, according to Coin Metrics, building on a rally underway before the central bank decision Wednesday. Bitcoin, like stocks, initially jumped and then pulled back as traders absorbed the news.

Ether also rose 5%. Its main competitor, the Solana token, jumped 7.5%.

Stock Chart IconStock chart icon

hide content

Bitcoin rises after Wednesday’s Fed decision

Stocks tied to the price of bitcoin climbed. Bitcoin exchange operator Coinbase advanced 6%. MicroStrategy, widely used as a high beta play on the price of bitcoin, gained 9%.

Some investors are concerned that the size of the interest rate reduction, when the Fed could have eased policy by only a quarter point, shows that policymakers must be more worried about the economy than the markets would indicate. Others are more focused on easier borrowing costs spurring an uptick in liquidity that’s likely to support prices.

Bitcoin behaves as both a hedge and a risk asset, and is currently more closely correlated to the Nasdaq Composite Index than it is with gold.

Bitcoin is up 6% in September, usually its worst month of the year. It isn’t out of the woods yet, however, said Yuya Hasegawa, crypto market analyst at Japanese bitcoin exchange Bitbank. He warned about the outcome of the Bank of Japan’s policy meeting, which began Thursday.

“The BOJ will likely keep the policy rate this time around but signs of additional rate hikes could boost [the Japanese yen] and may trigger yen carry trade to rewind, which could result in a sell-off in the Japanese stock market and the risk-off sentiment could cascade into the crypto market,” he said. “Bitcoin has some time until the BOJ makes the decision and could extend its gain during Thursday’s U.S. session. The next likely short-term target is around $65,000.”

Don’t miss these cryptocurrency insights from CNBC PRO:

Continue Reading

Technology

China’s Alibaba launches over 100 new open-source AI models, releases text-to-video generation tool

Published

on

By

China's Alibaba launches over 100 new open-source AI models, releases text-to-video generation tool

The Alibaba office building is seen in Nanjing, Jiangsu province, China, Aug 28, 2024. 

CFOTO | Future Publishing | Getty Images

Alibaba on Thursday released more than 100 open-source artificial intelligence models and boosted the capabilities of its proprietary technology as it looks to ramp up competition with rivals.

The newly-released models, known as Qwen 2.5, are designed for use in applications and sectors ranging from automobiles to gaming and science research, Alibaba said. They have more advanced capabilities in math and coding, it added.

The Hangzhou-headquartered firm is looking to increase competition with domestic rivals such as Baidu and Huawei, as well as U.S. titans like Microsoft and OpenAI.

AI models are trained on huge amounts of data. Alibaba says its models have the abiltiy to understand prompts and generate texts and images.

Open-source means that anyone — including researchers, academics and companies — around the world can use the models to create their own generative AI apps without needing to train their own systems, saving time and expense. By open sourcing the models, Alibaba hopes more users will use its AI.

The Chinese e-commerce giant first launched its Tongyi Qianwen, or Qwen, model last year. Since then, it has released improved versions and says that, to date, its open source models have been downloaded 40 million times.

The company also said that it upgraded its proprietary flagship model called Qwen-Max, which is not open-source. Instead, Alibaba sells its capabilites through its cloud computing products to businesses. Alibaba said that Qwen Max 2.5-Max surpassed rivals such as Meta‘s Llama and OpenAI’s GPT4 in several areas inclduing reasoning and language comprehension.

Alibaba also launched a new text-to-video tool based on its AI models. This allows users to input a prompt and the AI will create a video based on it. This is similar to OpenAI’s Sora.

“Alibaba Cloud is investing, with unprecedented intensity, in the research and development of AI technology and the building of its global infrastructure,” Eddie Wu, CEO of Alibaba, said in a statement.

Behind China's push to find a domestic alternative to Nvidia

Wu, who took over the role of CEO at Alibaba last year amid a historic reshuffle, has been trying to reinvigorate growth at the tech giant, as it faces headwinds including rising competition and a sluggish Chinese consumer.

Alibaba is one of the biggest cloud computing players in China, but internationally, it trails the likes of Amazon and Microsoft. The company is hoping that its latest AI offerings may tempt customers inside and outside of China to sign up to its cloud services, boosting a division which has been sluggish but showed early sign of an acceleration in the June quarter.

Continue Reading

Trending