'We can confirm that the DoubleClick Ad Exchange, which has automatic malware filters, independently detected several creatives containing malware, and blocked them instantly - within seconds,' a Google spokesman wrote in an e-mail. It's not clear if the malware Armorize found is the same malware Google detected or a different attack.
Google acknowledged the issue in a statement to Threat Level and said it recently detected malware on its own through its DoubleClick Ad Exchange filter but this malware was stopped and never got served through its system to web sites. Huang says the infections appear to have begun no earlier than Dec. It's not known how many machines may have been infected by the malicious ad or how man web sites have displayed it. Huang says a backdoor is also installed on the user's machines, but he says researchers are still examining it to determine what it does.
