Malvertising is the use of online advertising to deliver malware. Attackers buy or hijack ad placements and inject malicious code into the creative, so a legitimate website serves a poisoned ad to its visitors. Some variants run without a click, by exploiting a flaw in the browser or a plugin. Preventing it takes patched software, DNS and email filtering, enterprise ad blocking, and staff who recognize the warning signs.









