MAD Monday

Posted by on Apr 9, 2012 in Mad Monday, Malvertising

When searching for download scrabble on, is one of the top advertisers presented in the results returned. Clicking through on their ad takes you through to a landing page which promises Scrabble as a download. This download is signed by “Play Turtle, LLC” and installs the Babylon Toolbar addon (signed by Babylon Ltd) into Internet Explorer.

Upon starting up IE for the first time after the install, the user is encouraged to set the Babylon Toolbar as a default provider when searching. As shown in the following screenshot, the default search service provided by the Babylon Toolbar is simply not safe for children:

Each ad is provided by Google. Note that I made absolutely no changes to the browser, the toolbar or any of its settings — this is a search performed verbatim after install.

« »