BasisService Adware
Our research team uncovered BasisService while exploring new submissions on the VirusTotal platform. Upon examination, we identified it as adware belonging to the AdLoad malware family. BasisService is crafted to inundate users with unwanted and potentially hazardous advertisements.
Adware, short for advertising-supported software, typically functions by displaying third-party visual content like pop-ups, coupons, banners, and surveys across various interfaces such as web pages and desktops. These ads may promote online scams, dubious software, and even malware. Some ads may trigger discreet downloads or installations when clicked.
It's important to note that while legitimate products or services may occasionally be advertised through such means, they are unlikely to be endorsed by official entities. More often, these promotions are carried out by scammers seeking illegitimate commissions through affiliate programs associated with the advertised content.
Ad-supported software often requires specific conditions to execute intrusive advertising campaigns, such as compatible browser or system specifications or visits to certain websites. However, regardless of whether BasisService delivers ads, its presence poses a threat to device security and user safety.
While many AdLoad applications exhibit browser-hijacking capabilities, our analysis found that BasisService does not possess these traits.
Furthermore, adware typically includes data-tracking features, which may also be present in the BasisService app. Software in this category can harvest browsing and search histories, browser cookies, login credentials, personally identifiable information, and credit card numbers, among other sensitive data. This information can then be monetized through sale to third parties.
How is Adware Commonly Distributed Online?
Adware is commonly distributed online through various methods, including:
Bundled Software: Adware often comes bundled with free software or applications downloaded from the internet. Users may unknowingly install adware alongside legitimate software if they do not carefully read the installation prompts or if the software's installation process is designed to be deceptive.
Fake Download Buttons: On websites offering free downloads, especially for popular software or media content, fake download buttons may lead users to inadvertently download adware instead of the intended content. These buttons are designed to resemble legitimate download buttons but actually initiate adware downloads.
Malvertising: Malvertising, or malicious advertising, involves cybercriminals injecting malicious code into online advertisements. When users click on these ads, they may unknowingly download adware onto their devices. Malvertising can appear on legitimate websites, including popular ones, making it difficult for users to distinguish between safe and harmful ads.
Phishing Emails and Spam: Adware may be distributed through phishing emails or spam messages that contain malicious attachments or links. These emails often employ social engineering tactics to trick recipients into downloading and installing adware onto their devices.
Infected Websites: Visiting compromised or malicious websites can expose users to adware. These websites may contain exploit kits that automatically download and install adware onto visitors' devices through vulnerabilities in their web browsers or plugins.
Browser Extensions: Adware can also be distributed through malicious browser extensions or plugins. Users may inadvertently install these extensions while browsing the internet or downloading software from untrustworthy sources.
