Identifying malicious creatives to supply side platforms (ssp)

An apparatus comprising a non-transitory machine readable medium storing a program having instructions which when executed by a processor will cause the processor to extract and feed identification data of malicious code existing in internet advertisements to intermediaries, the instructions of the program for:

• receiving at a feeding computing device from client computing devices malicious code reports of attempted unwanted actions by malicious creatives of internet advertisements (ads) sent by the intermediaries to webpages being displayed to users, the internet advertisements promoting goods and/or services,
• wherein executing each malicious creative in a browser activates an unwanted action attempt by malicious code;
• each malicious code report including a malicious code creative identification and an intermediary identification for the malicious code;
• parsing each malicious code report to extract the malicious code creative identification, and the intermediary identification for the malicious code;
• and
• feeding identification data of malicious creatives to intermediaries identified by the intermediary identifications based on the malicious code reports.

A system for extracting and feeding identification data of malicious code existing in internet advertisements to intermediaries, the system comprising a memory storing computer instructions that when executed by a processor include:

• a receiver configured to receive from client computing devices malicious code reports of attempted unwanted actions by malicious creatives of internet advertisements (ads) sent by the intermediaries to webpages being displayed to users, the internet advertisements promoting goods and/or services,
• wherein executing each malicious creative in a browser activates an unwanted action attempt by malicious code;
• each malicious code report including a malicious code creative identification and an intermediary identification for the malicious code;
• a parser configured to parse each malicious code report to extract the malicious code creative identification and the intermediary identification for the malicious code;
• and
• a feeder configured to feed identification data of malicious creatives to the intermediaries identified by the intermediary identifications of the malicious code reports.