Home Malware Programs Adware Terraclicks Ads

Terraclicks Ads

Posted: April 26, 2016

Threat Metric

Threat Level: 2/10
Infected PCs: 9
First Seen: April 26, 2016
Last Seen: November 22, 2021
OS(es) Affected: Windows

Terraclicks is a browser hijacker that may deliver threatening Web content that it disguises as legitimate advertisements. While externally similar to adware, Terraclicks may be a delivery mechanism for other threats, including Trojans and threats that may grant third parties access to your PC or information. Malware experts strongly urge you to use anti-malware products to delete Terraclicks immediately, without any interactions with its pop-ups or other content.

Terraclicks: The World of Clicks that You Don't Want

Although Web advertising is a straightforward source of revenue, many threat authors prefer to use it as a form of software installation, disguising their content with various tactics. Terraclicks is one case of a fake 'adware' product that, in actuality, only promotes advertisements delivered by the Terraclicks.com domain, which is a dedicated threat installation site. While PC owners may believe they are only being inconvenienced by these pop-ups, Terraclicks may use them for installing other threats.

Terraclicks, alone, may be installed through non-consensual exploits, such as bundling itself with other applications. Due to its recent development and limited scope, various popular anti-virus security brands have yet to develop threat entries for Terraclicks, which may remain undetected. Post-installation, Terraclicks may commence launching pop-up 'advertisements' that may trigger based off of factors malware experts still are analyzing.

Advertisements loaded through Terraclicks may include fake Flash updates, fake anti-virus services, fake Java updates, and other, classical phishing tactics that may trick computer users into downloading unwanted and harmful software. The payloads for these attacks still are under investigation. However, the Terraclicks campaign is most likely designed for targeting Windows users explicitly. Some of its triggers may include interactions with Windows Store apps, such as free games, and Windows 10 security features do not detect or block this threat.

Terraclicks.com may not be the only domain associated with the Terraclicks campaign. Others, hosting similar (and often identical) content include Terrapops.com, Cpmterra.com and Vipcpms.com. Most likely not coincidentally, most of these domains also may be associated with the Adsterra advertising network.

Clicking Your Way out of Terraclicks Pop-Ups Once and for All

Terraclicks shows one of the most significant dangers of dismissing potentially unsafe software: the fact that they may disguise outright attacks as ignorable annoyances. While a variety of PC security institutions have blacklisted Terraclicks's primary website, Terraclicks.com, there has been less overt success in identifying Terraclicks. If left alone, Terraclicks may continue generating automatic pop-up content, cycling through various domains, until one or more payloads trigger. The result of such attacks tends to be the installation of high-level threats, such as worms that may recreate themselves, or spyware that may collect legally-protected information.

While blacklists have their purpose as helpful security fall backs, malware experts also advise using safe browser settings that can prevent corrupted websites from launching arbitrary attack content. Blocking scripts and plugins, or enabling them on a per-site basis, can keep most Web-based threats from launching successful attacks. In other cases, anti-malware programs that include Web-monitoring features should be fully capable of identifying and blocking such attacks before Terraclicks could install new threats.

Terraclicks does not use a standard installation format and will not appear in your installed programs list. Use anti-malware utilities for deleting Terraclicks, and continue monitoring your computer for other signs that some of your 'pop-up advertisements' could have installed something more intrusive than adware.

Loading...