Lovely.

The JS loads this

https://d15gt9gwxw5wu0.cloudfront.net/ssa/175/?zoneid=

Which happens to mention the server...

http://www.rubiconproject.com/

which looks like

https://en.wikipedia.org/wiki/Rubicon_Project

On Tue, May 8, 2012 at 10:19 PM, Nischay Nahata <nischay...@gmail.com> wrote:
> Hi,
>
> I  finally got hold of the source that caused this problem. There is an
> extension called "I Want This" in chrome which does this evil work.
> As per my investigation, this extension is not installed by the user. Maybe
> we should notify Google that extensions are been installed without
> permissions.
>
> I have attached the JS file that causes this ad injection and also the HTML
> code that is been injected. Also note that this extension not only shows ads
> from Inkfruit or Jabong but RedBus.in also.
>
>
> On Mon, May 7, 2012 at 11:33 PM, Philippe Beaudette <phili...@wikimedia.org>
> wrote:
>>
>> I've been trying to get a copy of that source for months, so please send
>> it my way as well.  :)
>>
>> ___________________
>> Philippe Beaudette
>> Director, Community Advocacy
>> Wikimedia Foundation, Inc.
>>
>> 415-839-6885, x 6643
>>
>> phili...@wikimedia.org
>>
> --
> With Regards
>
> Nischay Nahata
> B.tech 3rd year
> Department of Information Technology
> NITK,Surathkal
>
> _______________________________________________
> Wikimediaindia-l mailing list
> Wikimediaindia-l@lists.wikimedia.org
> To unsubscribe from the list / change mailing preferences visit
> https://lists.wikimedia.org/mailman/listinfo/wikimediaindia-l
>



-- 
John Vandenberg

_______________________________________________
Wikimediaindia-l mailing list
Wikimediaindia-l@lists.wikimedia.org
To unsubscribe from the list / change mailing preferences visit 
https://lists.wikimedia.org/mailman/listinfo/wikimediaindia-l

Reply via email to