Good news for everyone that has been bitten by a flash-based ad that keeps overwriting your clipboard: Adobe has acknowledged this and is apparently investigating the issue.

Meanwhile I’m still amazed that there is no news about the people responsible for this. The malicious code is delivered via ads on some of the major websites, so there should be some trace back to the responsible party. The ads are paid for, so there is a financial trail; and there should also be logs of the upload of the banners. As always in this cases, it should be possible to follow the money.

This should be a relatively simple issue for Adobe to fix: just limit the amount of changes to the clipboard to one per second, or detect when the same update happens more than once. The malware will surely be adjusted to sidestep these protections, but that is normal in the continuous fight between security professionals and the “black hats”.