Security researchers discovered one adware which they called Zacinlo, which specializes in advertising scams. According to Bitdefender, Zacinlo can replace ads from various platforms, such as Google Adsense.
Adware has been used for a long time by developers who share their programs for free to increase their profits. In an announcement, Bitdefender wrote that "Adware has made great strides in recent years, and how much information it gathers, but also how difficult it is to remove it. The dividing line between adware and spyware is now very thin as the latest adware combines aggressive policies and sophisticated marketing terms as well as highly sophisticated techniques to fully control the computer.
Zacinlo, which comes from 2012, after infecting the computer, does one of the following two steps: Opens invisible windows to which it loads ads and then pretends that the user clicks on them or replaces the ads loaded into the browser user to monetize.
An interesting feature of adware is that it contains a rootkit driver that protects adware itself and its components. Rootkit-based malware is less than the 1% of threats, and its removal is extremely difficult.
"Threats like Zacinlo are proof that cybercrime actually pays. Advertising abuse is known to have been happening for years, but Zacinlo is pushing the bar. Sophistication, longevity, and the number of samples show that the team that manages it manages to steal significant sums of money from publishers and advertisers "