29Oca
Web Site and ISP based Malware (adware)
Computers on our network have this weird issue that some web pages (mostly Turkish news sites, but not all) show a specific type of ad that looks like adware/malware. When I click to close them, they open a new web page, which some of them are legit (e.g. youtube) and some of them are not.
Background:
- appear on almost all web browsers (Edge, Chrome, Firefox)
- appear on freshly installed computers from known good sources
- appear on computers in one office location but not another (other office is on a separate ISP and computers have installs from the same install sources)
- virus scans come up clean
- some employees report the same ads on their iphone for the same web pages (does not show on Android phones)
- Changing DNS settings to safe Google DNS IP numbers 8.8.8.8 for IPv4 and 2001:4860:4860::8888 for IPv6 has no effect
I am guessing that this has something to do with the web pages themselves and the ISP our company uses. Normally, these web pages have normal ads that appear on the first page. Probably, because of some security issues of the ISP, the news site ad engine, directs to unwanted ads.
- What is this situation called so I can do more research?
- How to get rid of these ads?
