{"id":12886,"date":"2019-07-30T10:40:31","date_gmt":"2019-07-30T08:40:31","guid":{"rendered":"https:\/\/www.ebas.ch\/drive-by-download\/"},"modified":"2019-11-16T22:00:00","modified_gmt":"2019-11-16T21:00:00","slug":"drive-by-download","status":"publish","type":"page","link":"https:\/\/www.ebas.ch\/en\/drive-by-download\/","title":{"rendered":"Drive-By Download"},"content":{"rendered":"<div id=\"av_section_1\" class=\"avia-section av-3osj-8edf3c5c57d6f444e32a620ab19c7a5a main_color avia-section-default avia-no-border-styling  avia-builder-el-0  avia-builder-el-no-sibling  avia-bg-style-scroll container_wrap fullsize\"><div class=\"container av-section-cont-open\"><main role=\"main\" itemprop=\"mainContentOfPage\" class=\"template-page content  av-content-full alpha units\"><div class=\"post-entry post-entry-type-page post-entry-12886\"><div class=\"entry-content-wrapper clearfix\">\n\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-jo2xz-588590f8e0c3dd5b36ff4df9077018fa\">\n.flex_column.av-jo2xz-588590f8e0c3dd5b36ff4df9077018fa{\nborder-radius:0px 0px 0px 0px;\npadding:0px 0px 0px 0px;\n}\n<\/style>\n<div class=\"flex_column av-jo2xz-588590f8e0c3dd5b36ff4df9077018fa av_three_fourth  avia-builder-el-1  el_before_av_one_fourth  avia-builder-el-first  first flex_column_div av-zero-column-padding  \"><section class=\"av_textblock_section av-jvmci8ju-cc9c551200cb1ac6ce92618f85fd6f76 \" itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/CreativeWork\"><div class=\"avia_textblock\" itemprop=\"text\"><p class=\"ebas-lead\">Simply visiting an infected website is sufficient to infect your device. Websites affected often contain reputable offers and have been compromised beforehand to distribute malware. But you can protect yourself.<\/p>\n<div class=\"ebas-gist\">\n<h4>Protect yourself against drive-by downloads by...<\/h4>\n<ul>\n<li>always using the most current version of your <span class=\"glossaryLink\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Browser&lt;\/div&gt;&lt;div class=glossaryItemBody&gt;A special computer program to display websites on the World Wide Web (WWW) or data and documents in general. The most important browsers used on the Internet are Google Chrome, Mozilla Firefox, Microsoft Edge and Apple Safari.&lt;\/div&gt;\n\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>browser<\/span> and all plug-ins (Adobe Flash Player, <span class=\"glossaryLink\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Java&lt;\/div&gt;&lt;div class=glossaryItemBody&gt;This is an object-orientated and platform-independent programming language. To run Java programs, the Java runtime environment will have to be installed on a computer.&lt;\/div&gt;\n\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>Java<\/span>, etc.).<\/li>\n<li>always keeping your <span class=\"glossaryLink\" aria-describedby=\"tt\" data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Operating system&lt;\/div&gt;&lt;div class=glossaryItemBody&gt;A program run on a device to manage system resources, such as processor, storage media and input and output devices, and which offers these resources to application programs (software). Some well-known operating systems are Windows, macOS, Linux, Android and iOS.&lt;\/div&gt;\n\" data-mobile-support=\"0\" data-gt-translate-attributes=\"[{&quot;attribute&quot;:&quot;data-cmtooltip&quot;, &quot;format&quot;:&quot;html&quot;}]\" tabindex=\"0\" role=\"link\">operating system<\/span> and all programs installed (Office, Adobe Acrobat Reader, etc.) up to date.<\/li>\n<li>always updating your <span class=\"glossaryLink\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Virus&lt;\/div&gt;&lt;div class=glossaryItemBody&gt;Although every user is still aware of this term, there are generally hardly any real (company) viruses in circulation any longer today. A classic (computer) virus infects existing files on a device in the hope that one of them is passed on to another user. If malware does not make any attempt to actively distribute itself, you call it a virus. If malware however is able to also spread automatically, e. g. by e-mail, you call it a worm.&lt;\/div&gt;\n\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>virus<\/span> scanner and regularly checking your hard drive for <span class=\"glossaryLink\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Virus&lt;\/div&gt;&lt;div class=glossaryItemBody&gt;Although every user is still aware of this term, there are generally hardly any real (company) viruses in circulation any longer today. A classic (computer) virus infects existing files on a device in the hope that one of them is passed on to another user. If malware does not make any attempt to actively distribute itself, you call it a virus. If malware however is able to also spread automatically, e. g. by e-mail, you call it a worm.&lt;\/div&gt;\n\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>viruses<\/span>.<\/li>\n<\/ul>\n<\/div>\n<h3>Drive-by-infections threats<\/h3>\n<p>Hackers often systematically <span class=\"glossaryLink\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Exploit&lt;\/div&gt;&lt;div class=glossaryItemBody&gt;An &amp;lt;strong&amp;gt;exploit&amp;lt;\/strong&amp;gt; is a term denominating malicious software which specifically exploits a certain vulnerability to compromise a system.&lt;\/div&gt;\n\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>exploit<\/span> websites by exploiting their <span class=\"glossaryLink\" aria-describedby=\"tt\" data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Vulnerability&lt;\/div&gt;&lt;div class=glossaryItemBody&gt;A vulnerability is a term denominating a vulnerability found in any hardware or software which could trigger unexpected, unwanted system behaviour under certain conditions.&lt;\/div&gt;\n\" data-mobile-support=\"0\" data-gt-translate-attributes=\"[{&quot;attribute&quot;:&quot;data-cmtooltip&quot;, &quot;format&quot;:&quot;html&quot;}]\" tabindex=\"0\" role=\"link\">vulnerabilities<\/span>. Website operators often remain unaware of this for some time.<\/p>\n<p>The following items will explain what it is that makes drive-by downloads so dangerous and unpredictable:<\/p>\n<ol>\n<li>A device is infected by simply visiting an infected website containing malicious code, i.e. it is not necessary for visitors to start any download or explicitly install anything.<\/li>\n<li>The <span class=\"glossaryLink\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Malware&lt;\/div&gt;&lt;div class=glossaryItemBody&gt;The term is made up of the terms &amp;quot;malicious&rdquo; and &amp;quot;software&rdquo;. Malware is the generic term for software which executes malicious functions on a device (such as viruses, worms, Trojans, ransomware).&lt;\/div&gt;\n\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>malware<\/span> download is started automatically in the background once you visit a website. This bypasses firewalls, which don&rsquo;t offer any protection against this.<\/li>\n<li>And it is not only pages with dubious contents which are affected; respectable, well-known and frequently visited websites can also become infected with malicious code.<\/li>\n<\/ol>\n<h3>Counter-measures<\/h3>\n<p>To protect yourself, you should also use the latest version of your <span class=\"glossaryLink\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Browser&lt;\/div&gt;&lt;div class=glossaryItemBody&gt;A special computer program to display websites on the World Wide Web (WWW) or data and documents in general. The most important browsers used on the Internet are Google Chrome, Mozilla Firefox, Microsoft Edge and Apple Safari.&lt;\/div&gt;\n\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>browser<\/span> including any plug-ins (utilities expanding <span class=\"glossaryLink\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Browser&lt;\/div&gt;&lt;div class=glossaryItemBody&gt;A special computer program to display websites on the World Wide Web (WWW) or data and documents in general. The most important browsers used on the Internet are Google Chrome, Mozilla Firefox, Microsoft Edge and Apple Safari.&lt;\/div&gt;\n\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>browser<\/span> functionality) you use.<\/p>\n<p>Another important protective measure is to always keep your anti-<span class=\"glossaryLink\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Virus&lt;\/div&gt;&lt;div class=glossaryItemBody&gt;Although every user is still aware of this term, there are generally hardly any real (company) viruses in circulation any longer today. A classic (computer) virus infects existing files on a device in the hope that one of them is passed on to another user. If malware does not make any attempt to actively distribute itself, you call it a virus. If malware however is able to also spread automatically, e. g. by e-mail, you call it a worm.&lt;\/div&gt;\n\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>virus<\/span> software up-to-date. Since many <span class=\"glossaryLink\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Virus&lt;\/div&gt;&lt;div class=glossaryItemBody&gt;Although every user is still aware of this term, there are generally hardly any real (company) viruses in circulation any longer today. A classic (computer) virus infects existing files on a device in the hope that one of them is passed on to another user. If malware does not make any attempt to actively distribute itself, you call it a virus. If malware however is able to also spread automatically, e. g. by e-mail, you call it a worm.&lt;\/div&gt;\n\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>viruses<\/span> are downloaded as a zipped file and are only unzipped once on a user device, <span class=\"glossaryLink\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Virus&lt;\/div&gt;&lt;div class=glossaryItemBody&gt;Although every user is still aware of this term, there are generally hardly any real (company) viruses in circulation any longer today. A classic (computer) virus infects existing files on a device in the hope that one of them is passed on to another user. If malware does not make any attempt to actively distribute itself, you call it a virus. If malware however is able to also spread automatically, e. g. by e-mail, you call it a worm.&lt;\/div&gt;\n\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>virus<\/span> scanners are not always able to detect them. It is therefore vital to run regular complete <span class=\"glossaryLink\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Virus&lt;\/div&gt;&lt;div class=glossaryItemBody&gt;Although every user is still aware of this term, there are generally hardly any real (company) viruses in circulation any longer today. A classic (computer) virus infects existing files on a device in the hope that one of them is passed on to another user. If malware does not make any attempt to actively distribute itself, you call it a virus. If malware however is able to also spread automatically, e. g. by e-mail, you call it a worm.&lt;\/div&gt;\n\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>virus<\/span> scans of your hard drive (for instance every week).<\/p>\n<h3>Checking websites<\/h3>\n<p>Norton (Symantec) offers a service on their website which enables you to find out the security status (and inherent potential threats) of well-known websites.<\/p>\n<p>To do so, visit <a href=\"https:\/\/safeweb.norton.com\/?ulang=deu\" target=\"_blank\" rel=\"noopener noreferrer\">Norton Safe Web<\/a> and enter the address of the required website into the field provided. You will then be given a website assessment by Norton.<\/p>\n<\/div><\/section><\/div>\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-e2kbb-86d4495b00c389f290046e9e5f6e0589\">\n.flex_column.av-e2kbb-86d4495b00c389f290046e9e5f6e0589{\nborder-radius:0px 0px 0px 0px;\npadding:0px 0px 0px 0px;\n}\n<\/style>\n<div class=\"flex_column av-e2kbb-86d4495b00c389f290046e9e5f6e0589 av_one_fourth  avia-builder-el-3  el_after_av_three_fourth  el_before_av_three_fourth  ebas-sidebar flex_column_div av-zero-column-padding  \"><section class=\"av_textblock_section av-jvmf7hs6-2c9b129e1cb5a6a402d6c36dd4e0aff8 \" itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/CreativeWork\"><div class=\"avia_textblock\" itemprop=\"text\"><p>&quot;<span class=\"glossaryLink\" aria-describedby=\"tt\" data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Drive-By Download&lt;\/div&gt;&lt;div class=glossaryItemBody&gt;This is the term used for a device which becomes infected with malware solely by visiting a website. Websites affected often contain reputable offers and have been compromised beforehand to distribute malware. Simply &amp;quot;surfing&rdquo; to an affected website is enough to infect a device.&lt;\/div&gt;\n\" data-mobile-support=\"0\" data-gt-translate-attributes=\"[{&quot;attribute&quot;:&quot;data-cmtooltip&quot;, &quot;format&quot;:&quot;html&quot;}]\" tabindex=\"0\" role=\"link\">Drive-by download<\/span>&quot; (also called &quot;drive-by infection&quot;) is the term used for a device which becomes infected with <span class=\"glossaryLink\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Malware&lt;\/div&gt;&lt;div class=glossaryItemBody&gt;The term is made up of the terms &amp;quot;malicious&rdquo; and &amp;quot;software&rdquo;. Malware is the generic term for software which executes malicious functions on a device (such as viruses, worms, Trojans, ransomware).&lt;\/div&gt;\n\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>malware<\/span> (for instance <span class=\"glossaryLink\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Virus&lt;\/div&gt;&lt;div class=glossaryItemBody&gt;Although every user is still aware of this term, there are generally hardly any real (company) viruses in circulation any longer today. A classic (computer) virus infects existing files on a device in the hope that one of them is passed on to another user. If malware does not make any attempt to actively distribute itself, you call it a virus. If malware however is able to also spread automatically, e. g. by e-mail, you call it a worm.&lt;\/div&gt;\n\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>viruses<\/span>, Trojans) solely by visiting a website. In the process, <span class=\"glossaryLink\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Browser&lt;\/div&gt;&lt;div class=glossaryItemBody&gt;A special computer program to display websites on the World Wide Web (WWW) or data and documents in general. The most important browsers used on the Internet are Google Chrome, Mozilla Firefox, Microsoft Edge and Apple Safari.&lt;\/div&gt;\n\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>browser<\/span> or <span class=\"glossaryLink\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Browser&lt;\/div&gt;&lt;div class=glossaryItemBody&gt;A special computer program to display websites on the World Wide Web (WWW) or data and documents in general. The most important browsers used on the Internet are Google Chrome, Mozilla Firefox, Microsoft Edge and Apple Safari.&lt;\/div&gt;\n\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>browser<\/span> plug-in <span class=\"glossaryLink\" aria-describedby=\"tt\" data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Vulnerability&lt;\/div&gt;&lt;div class=glossaryItemBody&gt;A vulnerability is a term denominating a vulnerability found in any hardware or software which could trigger unexpected, unwanted system behaviour under certain conditions.&lt;\/div&gt;\n\" data-mobile-support=\"0\" data-gt-translate-attributes=\"[{&quot;attribute&quot;:&quot;data-cmtooltip&quot;, &quot;format&quot;:&quot;html&quot;}]\" tabindex=\"0\" role=\"link\">vulnerabilities<\/span> are exploited.<\/p>\n<\/div><\/section><\/div>\n<style type=\"text\/css\" data-created_by=\"avia_inline_auto\" id=\"style-css-av-797ej-749108c2a3cfffc22f62afdc45fd0cb6\">\n.flex_column.av-797ej-749108c2a3cfffc22f62afdc45fd0cb6{\nborder-radius:0px 0px 0px 0px;\npadding:0px 0px 0px 0px;\n}\n<\/style>\n<div class=\"flex_column av-797ej-749108c2a3cfffc22f62afdc45fd0cb6 av_three_fourth  avia-builder-el-5  el_after_av_one_fourth  avia-builder-el-last  ebas-collapse first flex_column_div av-zero-column-padding  column-top-margin\"><section class=\"av_textblock_section av-k0cjjgav-af539e65f58c4259661da838ccc7be16 \" itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/CreativeWork\"><div class=\"avia_textblock\" itemprop=\"text\"><h3>Further information for those interested<\/h3>\n<\/div><\/section><br>\n<section class=\"av_textblock_section av-k0ch6tr9-8fb66ed00aaac24bda95501078fa528f \" itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/CreativeWork\"><div class=\"avia_textblock\" itemprop=\"text\"><h4>Technologies<\/h4>\n<p>Nowadays, websites frequently contain dynamic functions implemented via technologies such as <span class=\"glossaryLink\" aria-describedby=\"tt\" data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;JavaScript&lt;\/div&gt;&lt;div class=glossaryItemBody&gt;This is a script language for the dynamic design of websites. JavaScript makes it possible to change or reload content, so that search suggestions for instance can already be displayed while inputting a term.&lt;\/div&gt;\n\" data-mobile-support=\"0\" data-gt-translate-attributes=\"[{&quot;attribute&quot;:&quot;data-cmtooltip&quot;, &quot;format&quot;:&quot;html&quot;}]\" tabindex=\"0\" role=\"link\">JavaScript<\/span>, <span class=\"glossaryLink\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Java&lt;\/div&gt;&lt;div class=glossaryItemBody&gt;This is an object-orientated and platform-independent programming language. To run Java programs, the Java runtime environment will have to be installed on a computer.&lt;\/div&gt;\n\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>Java<\/span>, Adobe Flash, etc. These technologies allow for browsers and web servers to continuously communicate with each other for the duration of a session (the time period visitors spend on a website), without visitors having to do anything specific. This is for instance used to exchange banner ads, load lists, or transfer data to the web server.<\/p>\n<p>These actions are generally run in a <span class=\"glossaryLink\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Browser&lt;\/div&gt;&lt;div class=glossaryItemBody&gt;A special computer program to display websites on the World Wide Web (WWW) or data and documents in general. The most important browsers used on the Internet are Google Chrome, Mozilla Firefox, Microsoft Edge and Apple Safari.&lt;\/div&gt;\n\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>browser<\/span>&rsquo;s so-called &ldquo;sandbox&rdquo;. A sandbox is a standard component of browsers or plug-ins serving to reduce the risk potential on the Internet. In the process, unknown <span class=\"glossaryLink\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Macro&lt;\/div&gt;&lt;div class=glossaryItemBody&gt;Some programs (for instance Microsoft Office, Adobe Acrobat) allow users to automate certain actions using small programs &ndash; so-called macros, actions or scripts. However, attackers also like to abuse these to embed malicious code (malware) in seemingly innocuous-looking documents.&lt;\/div&gt;\n\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>scripts<\/span> are provided with a contained area where they can be run safely (i.e. they only have limited access, for instance to a local hard drive).<\/p>\n<p>If a <span class=\"glossaryLink\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Browser&lt;\/div&gt;&lt;div class=glossaryItemBody&gt;A special computer program to display websites on the World Wide Web (WWW) or data and documents in general. The most important browsers used on the Internet are Google Chrome, Mozilla Firefox, Microsoft Edge and Apple Safari.&lt;\/div&gt;\n\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>browser<\/span> or plug-in has a <span class=\"glossaryLink\" aria-describedby=\"tt\" data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Vulnerability&lt;\/div&gt;&lt;div class=glossaryItemBody&gt;A vulnerability is a term denominating a vulnerability found in any hardware or software which could trigger unexpected, unwanted system behaviour under certain conditions.&lt;\/div&gt;\n\" data-mobile-support=\"0\" data-gt-translate-attributes=\"[{&quot;attribute&quot;:&quot;data-cmtooltip&quot;, &quot;format&quot;:&quot;html&quot;}]\" tabindex=\"0\" role=\"link\">vulnerability<\/span> though, such <span class=\"glossaryLink\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Macro&lt;\/div&gt;&lt;div class=glossaryItemBody&gt;Some programs (for instance Microsoft Office, Adobe Acrobat) allow users to automate certain actions using small programs &ndash; so-called macros, actions or scripts. However, attackers also like to abuse these to embed malicious code (malware) in seemingly innocuous-looking documents.&lt;\/div&gt;\n\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>scripts<\/span> can access user devices directly. It is therefore possible for <span class=\"glossaryLink\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Malware&lt;\/div&gt;&lt;div class=glossaryItemBody&gt;The term is made up of the terms &amp;quot;malicious&rdquo; and &amp;quot;software&rdquo;. Malware is the generic term for software which executes malicious functions on a device (such as viruses, worms, Trojans, ransomware).&lt;\/div&gt;\n\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>malware<\/span> go get from the web server to the <span class=\"glossaryLink\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Browser&lt;\/div&gt;&lt;div class=glossaryItemBody&gt;A special computer program to display websites on the World Wide Web (WWW) or data and documents in general. The most important browsers used on the Internet are Google Chrome, Mozilla Firefox, Microsoft Edge and Apple Safari.&lt;\/div&gt;\n\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>browser<\/span> and then onto a user device via such a <span class=\"glossaryLink\" aria-describedby=\"tt\" data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Vulnerability&lt;\/div&gt;&lt;div class=glossaryItemBody&gt;A vulnerability is a term denominating a vulnerability found in any hardware or software which could trigger unexpected, unwanted system behaviour under certain conditions.&lt;\/div&gt;\n\" data-mobile-support=\"0\" data-gt-translate-attributes=\"[{&quot;attribute&quot;:&quot;data-cmtooltip&quot;, &quot;format&quot;:&quot;html&quot;}]\" tabindex=\"0\" role=\"link\">vulnerability<\/span>, without any conscious action by a user.<\/p>\n<h4>Protection provided by script language deactivation?<\/h4>\n<p>There are no really effective protective measures against drive-by downloads to date. To increase security further, you can deactivate <span class=\"glossaryLink\"  aria-describedby=\"tt\"  data-cmtooltip=\"&lt;div class=glossaryItemTitle&gt;Macro&lt;\/div&gt;&lt;div class=glossaryItemBody&gt;Some programs (for instance Microsoft Office, Adobe Acrobat) allow users to automate certain actions using small programs &ndash; so-called macros, actions or scripts. However, attackers also like to abuse these to embed malicious code (malware) in seemingly innocuous-looking documents.&lt;\/div&gt;\n\"  data-mobile-support=\"0\"  data-gt-translate-attributes='[{\"attribute\":\"data-cmtooltip\", \"format\":\"html\"}]' tabindex='0' role='link'>script<\/span> languages. However, this is not really a solution feasible in practice, since 95% of all websites rely on the technologies mentioned above, so that a large number of websites can no longer be displayed properly this way.<\/p>\n<\/div><\/section><\/div>\n<\/div><\/div><\/main><\/div><\/div>","protected":false},"excerpt":{"rendered":"<p>Simply visiting an infected website is sufficient to infect your device. Websites affected often contain reputable offers and have been compromised beforehand to distribute malware. But you can protect yourself.<\/p>\n","protected":false},"author":1,"featured_media":1640,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[30],"tags":[],"class_list":["post-12886","page","type-page","status-publish","has-post-thumbnail","hentry","category-threats"],"acf":[],"yoast_head":"<title>Drive-By Download - \u00abeBanking \u2013 but secure!\u00bb<\/title>\n<meta name=\"description\" content=\"Simply visiting an infected website is sufficient to infect your device. Websites affected often contain reputable offers and have been compromised beforehand to distribute malware. But you can protect yourself.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.ebas.ch\/en\/drive-by-download\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Drive-By Download - \u00abeBanking \u2013 but secure!\u00bb\" \/>\n<meta property=\"og:description\" content=\"Simply visiting an infected website is sufficient to infect your device. Websites affected often contain reputable offers and have been compromised beforehand to distribute malware. But you can protect yourself.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.ebas.ch\/en\/drive-by-download\/\" \/>\n<meta property=\"og:site_name\" content=\"\u00abeBanking \u2013 but secure!\u00bb\" \/>\n<meta property=\"article:modified_time\" content=\"2019-11-16T21:00:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.ebas.ch\/wp-content\/uploads\/2019\/08\/DriveByDownload.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2000\" \/>\n\t<meta property=\"og:image:height\" content=\"1333\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.ebas.ch\\\/en\\\/drive-by-download\\\/\",\"url\":\"https:\\\/\\\/www.ebas.ch\\\/en\\\/drive-by-download\\\/\",\"name\":\"Drive-By Download - \u00abeBanking \u2013 but secure!\u00bb\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.ebas.ch\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.ebas.ch\\\/en\\\/drive-by-download\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.ebas.ch\\\/en\\\/drive-by-download\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.ebas.ch\\\/wp-content\\\/uploads\\\/2019\\\/08\\\/DriveByDownload.jpg\",\"datePublished\":\"2019-07-30T08:40:31+00:00\",\"dateModified\":\"2019-11-16T21:00:00+00:00\",\"description\":\"Simply visiting an infected website is sufficient to infect your device. Websites affected often contain reputable offers and have been compromised beforehand to distribute malware. But you can protect yourself.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.ebas.ch\\\/en\\\/drive-by-download\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.ebas.ch\\\/en\\\/drive-by-download\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.ebas.ch\\\/en\\\/drive-by-download\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.ebas.ch\\\/wp-content\\\/uploads\\\/2019\\\/08\\\/DriveByDownload.jpg\",\"contentUrl\":\"https:\\\/\\\/www.ebas.ch\\\/wp-content\\\/uploads\\\/2019\\\/08\\\/DriveByDownload.jpg\",\"width\":2000,\"height\":1333,\"caption\":\"VIRUS DETECTED CONCEPT\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.ebas.ch\\\/en\\\/drive-by-download\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.ebas.ch\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Threats\",\"item\":\"https:\\\/\\\/www.ebas.ch\\\/en\\\/category\\\/threats\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Drive-By Down\u00adload\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.ebas.ch\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/www.ebas.ch\\\/en\\\/\",\"name\":\"\u00abeBanking \u2013 but secure!\u00bb\",\"description\":\"\u00abeBanking \u2013 but secure!\u00bb is an independent platform meant to help you maintain your personal computer security.\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.ebas.ch\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.ebas.ch\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.ebas.ch\\\/en\\\/#organization\",\"name\":\"\u00abeBanking \u2013 aber sicher!\u00bb\",\"url\":\"https:\\\/\\\/www.ebas.ch\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.ebas.ch\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.ebas.ch\\\/wp-content\\\/uploads\\\/2020\\\/06\\\/logo_ebas_de.svg\",\"contentUrl\":\"https:\\\/\\\/www.ebas.ch\\\/wp-content\\\/uploads\\\/2020\\\/06\\\/logo_ebas_de.svg\",\"width\":10,\"height\":1,\"caption\":\"\u00abeBanking \u2013 aber sicher!\u00bb\"},\"image\":{\"@id\":\"https:\\\/\\\/www.ebas.ch\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"}}]}<\/script>","yoast_head_json":{"title":"Drive-By Download - \u00abeBanking \u2013 but secure!\u00bb","description":"Simply visiting an infected website is sufficient to infect your device. Websites affected often contain reputable offers and have been compromised beforehand to distribute malware. But you can protect yourself.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.ebas.ch\/en\/drive-by-download\/","og_locale":"en_US","og_type":"article","og_title":"Drive-By Download - \u00abeBanking \u2013 but secure!\u00bb","og_description":"Simply visiting an infected website is sufficient to infect your device. Websites affected often contain reputable offers and have been compromised beforehand to distribute malware. But you can protect yourself.","og_url":"https:\/\/www.ebas.ch\/en\/drive-by-download\/","og_site_name":"\u00abeBanking \u2013 but secure!\u00bb","article_modified_time":"2019-11-16T21:00:00+00:00","og_image":[{"width":2000,"height":1333,"url":"https:\/\/www.ebas.ch\/wp-content\/uploads\/2019\/08\/DriveByDownload.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.ebas.ch\/en\/drive-by-download\/","url":"https:\/\/www.ebas.ch\/en\/drive-by-download\/","name":"Drive-By Download - \u00abeBanking \u2013 but secure!\u00bb","isPartOf":{"@id":"https:\/\/www.ebas.ch\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.ebas.ch\/en\/drive-by-download\/#primaryimage"},"image":{"@id":"https:\/\/www.ebas.ch\/en\/drive-by-download\/#primaryimage"},"thumbnailUrl":"https:\/\/www.ebas.ch\/wp-content\/uploads\/2019\/08\/DriveByDownload.jpg","datePublished":"2019-07-30T08:40:31+00:00","dateModified":"2019-11-16T21:00:00+00:00","description":"Simply visiting an infected website is sufficient to infect your device. Websites affected often contain reputable offers and have been compromised beforehand to distribute malware. But you can protect yourself.","breadcrumb":{"@id":"https:\/\/www.ebas.ch\/en\/drive-by-download\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.ebas.ch\/en\/drive-by-download\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.ebas.ch\/en\/drive-by-download\/#primaryimage","url":"https:\/\/www.ebas.ch\/wp-content\/uploads\/2019\/08\/DriveByDownload.jpg","contentUrl":"https:\/\/www.ebas.ch\/wp-content\/uploads\/2019\/08\/DriveByDownload.jpg","width":2000,"height":1333,"caption":"VIRUS DETECTED CONCEPT"},{"@type":"BreadcrumbList","@id":"https:\/\/www.ebas.ch\/en\/drive-by-download\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.ebas.ch\/en\/"},{"@type":"ListItem","position":2,"name":"Threats","item":"https:\/\/www.ebas.ch\/en\/category\/threats\/"},{"@type":"ListItem","position":3,"name":"Drive-By Down\u00adload"}]},{"@type":"WebSite","@id":"https:\/\/www.ebas.ch\/en\/#website","url":"https:\/\/www.ebas.ch\/en\/","name":"\u00abeBanking \u2013 but secure!\u00bb","description":"\u00abeBanking \u2013 but secure!\u00bb is an independent platform meant to help you maintain your personal computer security.","publisher":{"@id":"https:\/\/www.ebas.ch\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.ebas.ch\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.ebas.ch\/en\/#organization","name":"\u00abeBanking \u2013 aber sicher!\u00bb","url":"https:\/\/www.ebas.ch\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.ebas.ch\/en\/#\/schema\/logo\/image\/","url":"https:\/\/www.ebas.ch\/wp-content\/uploads\/2020\/06\/logo_ebas_de.svg","contentUrl":"https:\/\/www.ebas.ch\/wp-content\/uploads\/2020\/06\/logo_ebas_de.svg","width":10,"height":1,"caption":"\u00abeBanking \u2013 aber sicher!\u00bb"},"image":{"@id":"https:\/\/www.ebas.ch\/en\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/www.ebas.ch\/en\/wp-json\/wp\/v2\/pages\/12886","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ebas.ch\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.ebas.ch\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.ebas.ch\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ebas.ch\/en\/wp-json\/wp\/v2\/comments?post=12886"}],"version-history":[{"count":2,"href":"https:\/\/www.ebas.ch\/en\/wp-json\/wp\/v2\/pages\/12886\/revisions"}],"predecessor-version":[{"id":18807,"href":"https:\/\/www.ebas.ch\/en\/wp-json\/wp\/v2\/pages\/12886\/revisions\/18807"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.ebas.ch\/en\/wp-json\/wp\/v2\/media\/1640"}],"wp:attachment":[{"href":"https:\/\/www.ebas.ch\/en\/wp-json\/wp\/v2\/media?parent=12886"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ebas.ch\/en\/wp-json\/wp\/v2\/categories?post=12886"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ebas.ch\/en\/wp-json\/wp\/v2\/tags?post=12886"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}