Martech: Martech is Marketing Logo
  • Topics
    Digital Transformation
    Marketing Operations
    Data
    Customer & Digital Experience
    Performance Marketing
    Marketing Management
    Special Reports
    MarTech Topics
  • Conference
  • Webinars
  • Intelligence Reports
  • White Papers
  • What is MarTech
    Mission
    Staff
    Newsletter
    Search Engine Land
    Third Door Media

Processing...Please wait.

MarTech » Marketing Operations » Here’s a case of huge inventory fraud that ads.txt could vanquish

Here’s a case of huge inventory fraud that ads.txt could vanquish

The “domain spoofing” Hyphbot is three or four times larger than the legendary Methbot -- but publishers have the antidote.

Barry Levine on December 4, 2017 at 12:00 pm

A recently discovered inventory fraud is a massive lesson in why publishers should adopt the Interactive Advertising Bureau’s (IAB) ads.txt. initiative.

Recently, Adform published a white paper describing how it discovered this “domain spoofing” fraud, which it called “one of the largest botnets to ever hit digital advertising” — about three or four times larger than the famous Methbot fraud discovered 11 months ago by White Ops.

At the end of September, Copenhagen-based ad tech firm Adform began notifying a variety of ad exchanges of a large ad fraud operation that may have been generating at least half a million dollars a day. The FBI and the UK’s Metropolitan Police were also informed.

Adform says that the operation, which it dubbed Hyphbot, has apparently been active at least since August, utilizing a network of data centers. It created over 34,000 domain names and URLs so it could pretend to represent inventory for a variety of publishers, including such premium brands as the Economist, the Financial Times, CNN and The Wall Street Journal.

Advertisers bought space to show their ads on what they thought were those publishers’ sites, working through at least 14 different exchanges and SSPs that issued as many as 1.5 billion requests daily to ad buyers for bids on the fake sites. Hyphbot then employed bots from more than half a million IP addresses — obtained through hijacked personal computers — to generate impressions and video plays of the ads and thus generate income for the “publishers.”

While Hyphbot is still active, Adform says there has been a drop in its traffic. But the real killer could be the IAB’s ads.text effort, which is specifically designed to combat this kind of inventory-based fraud.

Publishers can post on their sites an ads.txt file showing the names and identifiers of the only exchanges or other entities authorized to offer their inventory. This assumes, of course, that the exchanges/SSPs only present inventory from the actual publishers and do not knowingly or unknowingly offer fakes.

Adform Chief Strategy Officer Jochen Schlosser told me that 100 percent adoption by publishers of ads.txt and exchanges could solve the problem of massive domain spoofing like Hyphbot.

But one problem, he pointed out, is that adoption has been slow since ads.txt was introduced about six months ago. In a blog post at the end of October, he wrote:

With the help of our BI team we have run through some major markets and verified the availability of ads.txt sites on the biggest 1,000 websites — the result clearly shows a low adoption rate. Even in the US, the leading programmatic market in the world, where we are expecting (rightfully as you can see) the highest adoption rate, we are still below 50% overall. This means that only allowing buying from ads.txt verified sites would decrease your access to inventory significantly. Looking across other selected countries and regions shows that the challenge exists globally. However, the growth rates are strong and we will continue to monitor this as part of regular blog posts.

Plus, he noted, the implementation of ads.txt has been spotty.

Some publishers, for instance, post an ads.txt file that has not been updated to show all currently verified partners.

Or the identification codes for some partners are incorrect. Or the demand side platforms (DSPs) used by advertisers may not have correctly deployed a crawler to track each publisher’s verified partners.

But, Schlosser acknowledged, if all publishers — or at least all reputable publishers — properly used and implemented ads.txt, massive fraud like Hyphbot “would go away.”


New on MarTech

    Using Google Analytics 4 integrations for insights and media activations
    Why we care about performance marketing
    Processes, visibility and optimization: The keys to digital marketing transformation
    Webinar: Grow revenue streams through web accessibility and compliance
    How to turn the great buyer resignation into B2B career opportunities

About The Author

Barry Levine
Barry Levine covers marketing technology for Third Door Media. Previously, he covered this space as a Senior Writer for VentureBeat, and he has written about these and other tech subjects for such publications as CMSWire and NewsFactor. He founded and led the web site/unit at PBS station Thirteen/WNET; worked as an online Senior Producer/writer for Viacom; created a successful interactive game, PLAY IT BY EAR: The First CD Game; founded and led an independent film showcase, CENTER SCREEN, based at Harvard and M.I.T.; and served over five years as a consultant to the M.I.T. Media Lab. You can find him at LinkedIn, and on Twitter at xBarryLevine.

Related Topics

Marketing OperationsPerformance Marketing

Get the daily newsletter digital marketers rely on.

Processing...Please wait.

See terms.

ATTEND OUR EVENTS The MarTech Conference logo.

September 28-29, 2022: Fall

Start Training Now: Master Classes

Start Discovering Now: Spring



The SMX Conference logo.

Start Training Now:: SMX Advanced

November 14-15, 2022: SMX Next

March 8-9, 2022: Master Classes

Webinars

Agencies: Grow Revenue Streams Through Web Accessibility & Compliance

Protect Your Paid Advertising Spend Against Ad Fraud and Invalid Traffic

Build an Integrated Search Strategy Across Google, Amazon and YouTube

See More Webinars
Intelligence Reports

Enterprise SEO Platforms: A Marketer’s Guide

Enterprise Identity Resolution Platforms

Email Marketing Platforms: A Marketer’s Guide

See More Intelligence Reports
Featured White Paper

Digital Marketing Strategy Ebook

See More Whitepapers

Receive daily marketing news & analysis.

Processing...Please wait.

Topics

  • Transformation
  • Operations
  • Data
  • Experience
  • Performance
  • Management
  • All Topics
  • Home

Our Events

  • MarTech
  • Search Marketing Expo - SMX

About

  • What is MarTech
  • Contact
  • Privacy
  • Terms Of Use
  • Marketing Opportunities
  • Staff

Follow Us

  • Facebook
  • Twitter
  • LinkedIn
  • Newsletters
  • RSS

© 2022 Third Door Media, Inc. All rights reserved.