Fake Sophos sponsored advert on Flickr

Graham Cluley
Graham Cluley
@

 @grahamcluley.com
 / grahamcluley

Christoph Hardy, a keen photographer and a colleague of mine from Sophos’s offices in Germany, noticed something strange when uploading some pictures on Flickr yesterday.

As he searched for Sophos pictures on Flickr, he noticed on the right hand side a sponsored advert (supplied by Overture, part of Yahoo’s advertising empire) claiming to be for Sophos Anti-Virus.

Sponsored advert pretending to be for Sophos Anti-Virus

Hmm.. that domain it’s linking to looks a bit suspicious doesn’t it? Fortunately the domains it links to (via Overture) are already blocked by Sophos products, so customers who are using our web appliance should be protected from whatever nasty might be lurking there.

Sign up to our free newsletter.
Security news, advice, and tips.

At the moment the program at the end of the link is AdwareAlert2009, not Sophos Anti-Virus. Seeing as it’s a pretty underhand tactic to advertise Sophos when it’s not Sophos, don’t be surprised if what you eventually download surprises you..

Of course, this isn’t the first time we’ve seen this kind of thing happening. Last September I reported how hackers were luring unsuspecting users to a Trojan horse by advertising it on Google as Norton AntiVirus.

Thanks to Christoph for bringing this to my attention. We’re filing a complaint to Yahoo.


Graham Cluley is an award-winning keynote speaker who has given presentations around the world about cybersecurity, hackers, and online privacy. A veteran of the computer security industry since the early 1990s, he wrote the first ever version of Dr Solomon's Anti-Virus Toolkit for Windows, makes regular media appearances, and hosts the popular "Smashing Security" podcast. Follow him on LinkedIn, Bluesky and Mastodon, or drop him an email.

What do you think? Leave a comment

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.