Fyncenter.com Attempts to Push Unsolicited Ads Using Fake Bot Check
Researchers have identified a suspicious website, fyncenter.com, which is designed to push browser notifications with the intention of redirecting visitors to potentially dangerous websites.
It appears that many visitors are being directed to these pages through the use of rogue advertising networks. The page's content and behaviour will also vary depending on the visitor's geographical location.
At present, visitors are presented with an image of a purple pixelated robot, alongside instructions to click 'Allow' if they are not a robot. The test is fake and will give the website permission to deliver notifications that promote scams, unreliable software and even malware.
Exploiting this site can have serious implications for users, potentially leading to system infections, privacy problems, financial losses and identity theft.
How Can Misleading Websites Use Fake Anti-Bot Checks to Spam Ads?
One way in which websites can use fake anti-bot checks to spam ads is by utilizing a form of social engineering. In this technique, the website can create an automated check which looks like it requires a human user to enter information such as their name, email address, or other details. However, when the user enters these details, they are actually giving the website permission to send them ads or other marketing materials. This technique allows the website to send spam ads without actually verifying that the user is a real person, as the check was only designed to appear as if it was a real anti-bot measure.
Another way in which websites can use fake anti-bot checks to spam ads is by using hidden code on their web pages. This code can be used to detect when a user has visited the website and then trigger an automated process which sends them ads or other marketing materials. This technique is often used by websites looking to generate revenue through ad-sales, as it allows them to target potential customers without actually verifying their identity.
