Don’t Spin The Wheel: The Fight Against Malvertising

We’ve all seen it — maybe some of us have even fallen for the trick — you’re on an ecommerce site and a big “Wheel of Savings” pops up. This innocent-seeming discount offer, though, isn’t what it seems, and it’s doing damage to the end-user spinning the wheel, and the site the wheel pops up on. 

The world of malvertising and browser extensions has been causing headaches in the ecommerce world for years and brands are constantly looking for ways to fight back and regain control of their websites. Matt Gillis is helping with that mission. Matt is the CEO of clean.io, which offers real-time protection against malicious actors and code for some of the most-trafficked websites in the world. 

On this episode of Up Next in Commerce, Matt takes us through some of the methods bad actors are using to install malicious code on ecommerce sites, and he gets into the nitty gritty of why browser extensions like Honey and Wikibuy are hurting brand bottom lines, and why those extensions are making marketing attribution nearly impossible. But he also offers some solutions, too, so that ecommerce brands can finally win back control of the user experience. Enjoy this episode!

Main Takeaways:

• Good Guy or Bad Guy?: Traditionally, malvertising is done by bad actors who infiltrate websites and take over through ads. But in the world of ecommerce, the bad actors are actually manifesting in the form of Fortune 100 companies that profit from website extensions like Honey and Wikibuy, which disrupt the user experience of the customer on the original ecommerce site. Solving that problem is the challenge for ecommerce brands that want to take back control.
• Sneakily Effective: In the malvertising world, the bad actors are at the top of the marketing game. They can achieve a 100% click-through rate at little to no cost because they are using sly, untraceable strategies. Targeting and eliminating those malvertisers is critical in order to level the playing field for ecommerce marketers to have success moving forward.
• Last Line of Defense: Publishing platforms hold most of the responsibility for the end-user experience. Everybody has a role to play in minimizing the risk of malicious buyers or advertisers, but ultimately, the publisher is the last line of defense against malvertising moving into the user experience, and they should be held accountable.

For an in-depth look at this episode, check out the full transcript below. Quotes have been edited for clarity and length.

---

Up Next in Commerce is brought to you by Salesforce Commerce Cloud. Respond quickly to changing customer needs with flexible Ecommerce connected to marketing, sales, and service. Deliver intelligent commerce experiences your customers can trust, across every channel. Together, we’re ready for what’s next in commerce. Learn more at salesforce.com/commerce

---

Transcript:

Stephanie:

Hey everyone. And welcome back to Up Next In Commerce. This is your host, Stephanie Postles co-founder at mission.org. Today on the show we have Matt Gillis, the CEO at clean.io. Matt, welcome.

Matt:

Stephanie, thanks for having me. I'm excited.

Stephanie:

I am very excited to have you here. We were just talking about how cool your background is, and I think that's actually kind of a fun place to start of where you're at in the world. And tell me a bit about your background.

Matt:

Yeah. Hey, so I'm in Baltimore and we actually just took possession of this office in February, right before the pandemic. And so the irony is I've been here every day since the pandemic started pretty much.

Stephanie:

By yourself?

Matt:

But I'm by myself. So we have 4,000 square feet. We just did the mural right before the pandemic and no one on our team has been able to experience it pretty much. But yeah, cybersecurity company located in Baltimore, we're about 45 people, I guess you could say solving this problem of untrusted and malicious JavaScript that is ruining user experiences in revenue across the internet. That's us in a nutshell.

Stephanie:

Cool. Well, I am really excited to dive further into clean.io. Before we do that though, I was hoping you can kind of go through your background because I saw you've worked at places like AOL, you've been in publishing. You've been in ad space. Tell me a bit about what you did before you came to clean.io.

Matt:

So full disclosure, I'm old. And so I've been around a little bit. I've had some fun. But yeah, I think key things I've spent probably the last 20-ish or so years in a couple of different capacities. Right out of university, I started in the mobile industry and mobile at that time was just making phone calls, that's it. There wasn't even texting then.

Matt:

In fact, my job back in those days was I would stand on a golf course at a golf tournament and let people make free phone calls because that was the cool thing to do then. No one had cell phones and if they did, they were like those brick ones. You remember those ones that you couldn't fit in your pocket?

Stephanie:

Yeah. And you were the cool guy like, "I've got access to an awesome phone, anyone want in?"

Matt:

Yeah. And listen, men and women would come up to me and they'd be like, "Can I call back and check and see if I have any messages?" And so that was the cool thing to do then. I know it sounds so crazy that was a thing at some point, but yeah. So I worked at mobile operators in the early stages of my career.

Matt:

So I worked at Bell Mobility in Toronto, Canada. I'm from Toronto. And then I moved down here to work at Verizon Wireless. And at the end of my tenure at Bell Mobility and my tenure at Verizon, I was focused on some of the services that you live by on your cell phone today. So this was in kind of late '99 and then the early 2000s of things like video on demand on your phone, playing games on your phone, downloading ringtones on your phone, I'm sure you did that.

Stephanie:

Oh, ringtones, yeah [inaudible].

Matt:

They were, obviously a huge business at some point.

Stephanie:

Now if my phone rings I'm like, "Stop it, what are you doing? Who's calling me? Don't call me, text me."

Matt:

Put it on mute. Yes, exactly. So I was kind of part of the foundational days of things that you would do with your phone, before the iPhone. And then I went and took a swing at being an entrepreneur and joined a little small video game company. Our biggest game was Who Wants to Be a Millionaire? We did a lot of TV game shows. So we did, Are You Smarter than a 5th Grader? And things like that.

Matt:

So I kind of walked the mile as a publisher for a while and then Capcom, which is the Japanese video game company acquired us. So I ran their publishing business for a few years and I got to experience what it's like to be a publisher and how hard it is to make money.

Matt:

And that was kind of in those early days of the iPhone where I'd say to people, "You'll go and spend $5 on this latte, but you won't pay $5 for unlimited use of a game over a period of time." And this is back in 2008, 2009. And so we had a real struggle and people weren't wanting to pay for our games. They want them free and free became kind of the thing on the iPhone.

Matt:

And so recognizing that struggle, I actually joined this company called Millennial Media, which was one of the earliest mobile ads platforms for app developers, helping app developers make money with ads. Some of our biggest customers at the time were like Words with Friends, if you've played Words with Friends-

Stephanie:

Yes, I have.

Matt:

... ads in every game. So we were kind of one of the foundational tech partners with folks like Words with Friends and various other games across the internet and apps. Did that for eight years through an acquisition with Verizon and AOL. And then we acquired Yahoo. So I ran the publisher platforms business at the combined entity of those companies, which was awesome.

Matt:

And one of the biggest problems in my time over that period was this thing called malicious ads, or malvertising as they call it. You probably are familiar with when you're scrolling away on your phone and all of a sudden it redirects you and says, congratulations, you won an Amazon gift card. And you're like, "I didn't click anything." Or spin the wheel for your chance.

Stephanie:

Yeah. I did that once I fell for it. I was like, "Oh, I spun it." I couldn't help it.

Matt:

Never spin the wheel, Stephanie.

Stephanie:

I only did it once, but yeah, afterwards I'm like, "That was a bad call. Why did I do that?"

Matt:

Yeah. So it was a big problem in my past life. And there were a few folks that were solving this problem and two of them were folks that I had worked with at AOL. When I left, it was called Oath at the time, which is Verizon Media now.

Matt:

I went and had lunch with these guys and t