Topics Archives - Integral Ad Science

Inside “Arcade,” the Gaming Web That Plays Itself

IAS Team — Wed, 29 Oct 2025 12:00:00 +0000

Executive Summary

The IAS Threat Lab is a dedicated team within Integral Ad Science (IAS) focused on uncovering, dissecting, and mitigating sophisticated ad-fraud schemes and malicious digital-advertising behavior. The team’s latest discovery, Arcade, reveals a growing monetization pattern within the open web’s gaming ecosystem. A large cluster of HTML5 gaming domains, all active and fully functional, are monetizing their ad supply through hidden in-app browser activity sourced from fraudulent Android applications. These gaming domains receive real ad requests and deliver playable content, but the traffic itself never comes from visible users. Instead, it originates from background-rendered browser tabs embedded inside Android utilities and lightweight gaming apps.

The IAS Threat Lab identified 50 Android apps with a combined 10 million installs, collectively driving traffic to a network of more than 200 HTML5 gaming domains. The HTML5 games are legitimate and responsive, yet typically unseen by human users. IAS’s fraud detection systems identified unusual background rendering and domain iteration behavior, enabling early intervention before the campaign reached full scale.

An Invisible Arcade of Real Games

The domains at the heart of this scheme are deceptively authentic. Each hosts playable, browser-based games, complete with interactive interfaces and advertising frameworks. The domain names frequently contain gaming-related keywords such as “game” or “play” and appear innocuous to verification systems because the pages load correctly and function as intended. When traffic is reviewed on the surface, everything points to legitimate gaming engagement.

However, behind this facade, fraudulent Android apps continuously load these pages in invisible in-app browser tabs, generating a constant stream of ad impressions. The pages are not user-facing, and the activity occurs silently while the app performs unrelated tasks. One analyzed app cycled through hundreds of domains in sequence, creating persistent, automated inventory that appeared indistinguishable from genuine gameplay sessions.

How the Scheme Activates

Arcade’s activation framework builds on the same cloaking principles first disclosed by IAS in Mirage. In that earlier operation, apps concealed their ad fraud logic until certain install conditions were met, allowing them to appear legitimate in standard testing environments. Arcade applies this same approach.

When installed directly from app stores, Arcade-linked apps behave normally and show no signs of suspicious behavior. The ad fraud components only activate when the app identifies that it has been installed through a paid ad campaign or referral flow.

This determination is made using attribution SDKs (Appsflyer SDK), which reports the method of installation to the app. If the install is confirmed to be campaign-driven, the app communicates with a remote command-and-control server, transmitting device and referral data in custom headers. When these headers meet strict validation checks, the server responds with an encrypted payload, which the app decrypts and loads dynamically. The decrypted code enables hidden in-app browser tabs to render HTML5 gaming domains in the background and, in many cases, activates out-of-context ad delivery as a secondary monetization path

Because this payload is delivered only to targeted devices, the apps remain clean under normal review conditions. Many samples also include anti-analysis safeguards designed to detect virtualized or sandboxed environments and suspend execution, further complicating detection efforts.

Monetization at Two Levels

Once activated, apps under the Arcade cluster monetize through two distinct yet complementary mechanisms. The first is hidden traffic generation, which uses the network of gaming domains as a monetization endpoint. These domains serve as the true beneficiaries, selling inventory created by invisible sessions within the apps. The second is out-of-context advertising, a recurring behavior seen in earlier IAS investigations such as Vapor and Mirage, where apps run unexpected full-screen or interstitial ads appearing outside normal engagement flows.

This dual structure allows threat actors to extract revenue from both visible and invisible ad surfaces. While the visible ads frustrate users, the invisible gaming sessions serve as the far greater financial engine.

Distribution and Geographic Shifts

Arcade’s early activity was concentrated in Western markets, primarily the United States, Brazil, and Canada. Over time, the campaigns have migrated toward Asia-Pacific regions. By September 2025, installs and traffic were dominated by Turkey, Vietnam, the Philippines, Thailand, Indonesia, and Malaysia. These countries now comprise nearly half of all detected Arcade traffic, indicating a deliberate redirection of campaign targeting.

Among the identified apps, Street King Vacano (com.txt.streetking.vacano) a lightweight gaming app exemplifies Arcade’s scaling model. The app achieved top chart positions, including #1 Top New Free, in several markets and reached over 1 million installs in less than one month.

Detection and Outlook

Arcade is anything but subtle. The volume of traffic attributed to this operation points to a well-resourced and coordinated effort, capable of producing and maintaining a myriad of Android apps and gaming domains at industrial scale. The threat actors behind Arcade have invested heavily in development infrastructure, domain acquisition, and continuous app deployment, allowing them to sustain large amounts of fraudulent traffic that blend into the broader gaming ecosystem.

IAS fraud detection systems identified the operation through a combination of behavioral anomaly analysis and domain traversal pattern recognition. Repeated, rapid page loads and non-interactive rendering events exposed the activity as non-human.

The ongoing investigation continues to map the infrastructure of developer accounts and associated domain operators behind the scheme. While the current set includes 200 gaming domains and 50 apps, the modular nature of Arcade’s framework suggests that new domains can easily be added as others are blocked.

Conclusion

Arcade demonstrates how legitimate web content can be reappropriated into a hidden monetization layer. The gaming domains themselves are central to this operation, earning revenue from traffic that no human ever generates. Android apps function as the traffic engine, quietly delivering ad requests that fund the ecosystem behind them.

By detecting and removing these apps and domains from the advertising supply chain, IAS effectively cuts off the operation’s financial lifeline, preventing further monetization and neutralizing the resources that fuel its continued growth.

IAS Threat Lab remains committed to uncovering and disrupting evolving monetization schemes before they reach advertisers’ budgets. Learn more about our AI-powered approach to combatting fraud pre- and post-bid.

The post Inside “Arcade,” the Gaming Web That Plays Itself appeared first on Integral Ad Science.

How an Insurance Brand Cut Waste While Safeguarding Suitability

IAS Team — Tue, 28 Oct 2025 13:55:38 +0000

Key Results

0%

Drop in brand suitability fails

0%

Reduction in platform CPM

The Challenge

During peak travel seasons, social media conversations about accidents and natural disasters tend to surge — creating unwanted adjacency risks for insurance advertisers. A leading insurance brand wanted greater control over where its ads appeared, especially during the holidays, when such posts become more frequent.

However, default platform filters didn’t provide the precision needed to block specific types of content without limiting scale.

The Approach

Partnering with IAS, the brand implemented Social Optimization to create a custom suitability profile tailored to its unique risk thresholds. The team began by establishing a baseline using its standard first-party inventory filter, then relaxed those settings to allow more flexibility before layering in Social Optimization.

This setup allowed the brand to block only the most contextually misaligned content — like automotive accidents and natural disasters — while maintaining campaign reach and efficiency.

The Results

The impact was immediate. The brand achieved a 38% reduction in brand suitability fail rates and an 18% decrease in platform CPM, even after accounting for the cost of Social Optimization. With fewer ads appearing next to unsuitable content, overall media efficiency improved, freeing up budget that could be reinvested into high-quality, brand-safe placements.

Why It Matters

For marketers in regulated industries like insurance, precision and protection are equally important. By pairing custom suitability controls with IAS Social Optimization, brands can safeguard reputation, eliminate waste, and reach audiences in the right moments — without compromising performance.

See how IAS Social Optimization can help you drive efficiency and safeguard suitability across every social platform.

The post How an Insurance Brand Cut Waste While Safeguarding Suitability appeared first on Integral Ad Science.

How a Major Entertainment Brand Maintained Suitability and Reduced Social Platform Costs

IAS Team — Tue, 21 Oct 2025 12:00:00 +0000

Key Results

0%

Increase in suitable impressions

0%

Decrease in platform CPM

The Challenge

For one major entertainment advertiser, brand suitability requirements across social media varied by the film being promoted. A family-friendly holiday release required maximum protection, while a horror campaign was less restrictive.

However, existing first-party platform filters weren’t flexible enough to meet these unique needs — creating a gap between brand safety and performance goals.

The Approach

The brand implemented IAS Social Optimization to layer customized suitability controls over its platform’s inventory filters. Starting with a relaxed first-party filter, IAS’s solution allowed the advertiser to fine-tune its suitability thresholds and blocklists for each campaign. This gave the brand more flexibility to align content adjacency with individual film requirements — without sacrificing scale.

Even with the cost of IAS Social Optimization and Total Media Quality included, the brand achieved measurable efficiency gains, showing that a customized approach to suitability drives both safety and scale.

With improved efficiency and lower CPMs, this brand’s savings can be reinvested into high-performing, suitable placements, reinforcing long-term campaign ROI across future social initiatives.

The Results

By shifting to a more dynamic suitability strategy, the brand achieved measurable gains across both performance and efficiency. More ads appeared in contextually aligned environments, driving stronger visibility and engagement from their target audience.

Video completion rates rose dramatically, and engagement followed suit, signaling that creative was resonating in the right moments. At the same time, smarter optimization reduced overall media costs, proving that brand suitability and efficiency can go hand in hand.

By taking a more dynamic approach to suitability, the brand achieved:

See how IAS Social Optimization can help you drive efficiency and safeguard suitability across every social platform.

The post How a Major Entertainment Brand Maintained Suitability and Reduced Social Platform Costs appeared first on Integral Ad Science.

IAS Expands Brand Safety & Suitability Measurement to Threads

IAS Team — Thu, 16 Oct 2025 13:00:00 +0000

Safeguard your campaigns on Threads with advanced content classification at scale

IAS is expanding Total Media Quality for Meta to include Brand Safety & Suitability Measurement on Threads. Advertisers can now validate their media placements on Threads feed with confidence—ensuring campaigns appear alongside content that aligns with brand values.

With this launch, advertisers gain access to the same trusted measurement already available across Facebook and Instagram Feed and Reels. Powered by IAS’s best-in-class Multimedia Technology, which uses image, audio, and text signals to evaluate content at scale, Total Media Quality for Meta helps safeguard brand reputation in real time.

With IAS’s Brand Safety and Suitability Measurement for Meta’s Threads, you get:

Third-party validation to ensure safe, suitable content adjacency on Threads feed
Comprehensive Suitability with insights across key categories and risk levels
AI-powered frame-by-frame analysis using best-in-class Multimedia Technology
Content-level reporting with custom suitability within the IAS Signal UI
Global scale with coverage across 34 supported languages

This expansion reinforces IAS’s commitment to helping brands safeguard and scale across Meta platforms with transparency and control.

Ready to explore Threads measurement? Learn how IAS can help you protect your brand and optimize performance.

The post IAS Expands Brand Safety & Suitability Measurement to Threads appeared first on Integral Ad Science.

Publica by IAS and Samsung Ads Renew Exclusive Global CTV Partnership

IAS Team — Tue, 30 Sep 2025 12:00:00 +0000

Publica by IAS and Samsung Ads have renewed their exclusive global partnership to continue powering premium connected TV (CTV) advertising experiences. The extended collaboration strengthens a relationship that monetizes video programming across CTV inventory more effectively while ensuring that Samsung TV Plus viewers enjoy a seamless experience.

A partnership built on scale and innovation

The combination of Samsung Ads’ massive audience and Publica’s purpose-built CTV technology creates a powerful foundation for the next era of streaming. Advertisers gain transparent, performance-driven access to premium inventory, while viewers enjoy free, high-quality content with ad experiences that feel natural and unobtrusive.

By extending their exclusive global partnership, which began in 2022, Publica and Samsung Ads are proving that premium, ad-supported streaming can deliver for publishers, advertisers, and audiences alike.

Powering better ad experiences

Audiences expect CTV to feel as smooth as traditional television, even as the underlying infrastructure is powered by programmatic technology. Through this renewed partnership, Publica helps Samsung Ads meet this expectation through a set of advanced tools that deliver polished, linear-like ad breaks without sacrificing performance.

Advanced ad serving: Granular controls enable precise targeting and optimization so each ad break feels natural while delivering the precision of digital.
Smart ad pod decisioning: Slot-level targeting allows for first-pod placement or category exclusivity, helping advertisers maximize impact and manage frequency.
Unified auctions: All demand sources compete in a single, transparent auction that drives revenue and ensures fair access for buyers.
Server-side ad insertion (SSAI): Tiering, deduplication, and competitive separation keep ads relevant while maintaining a smooth viewing experience.

These capabilities allow Samsung Ads to balance the needs of advertisers with the expectations of viewers—an essential factor in the continued growth of Samsung TV Plus.

Expanding opportunities for advertisers

For advertisers, the partnership means more than just access to inventory. With Publica’s unified auction and advanced pod construction technology, buyers can plan campaigns with greater confidence and flexibility.

Programmatic access to Samsung TV Plus inventory allows marketers to extend their reach across a diverse mix of live channels and on-demand content, all while maintaining control over frequency and placement. The result is a premium environment where brands can scale campaigns and achieve measurable outcomes.

Setting the stage for the future of CTV

The renewal signals a continued focus on innovation in a fast-evolving marketplace. As streaming adoption accelerates and new ad formats emerge, Samsung Ads and Publica are committed to delivering the tools, data, and flexibility that advertisers need to connect with audiences across the globe.

For more information, please read the press release.

The post Publica by IAS and Samsung Ads Renew Exclusive Global CTV Partnership appeared first on Integral Ad Science.

Power Stronger Performance on Social

IAS Team — Mon, 15 Sep 2025 12:00:00 +0000

Learn how top advertisers are maximizing performance on social this holiday season

Social media is a high-stakes arena for advertisers. It’s where your audience spends the bulk of their time. But while the reach is undeniable, the content environment is constantly shifting. Virality, user-generated content, and platform-specific trends can change the tone of a feed in minutes — and during the holidays, the pace of change accelerates even more.

In our latest white paper, we explore how Social Optimization is helping global advertisers make their holiday campaigns more efficient, more effective, and more aligned with brand strategy. You’ll find out how top brands are taking charge of their social campaigns this holiday season with real-time suitability controls, seeing results like:

3x ROI on social media campaigns for a global telecommunications brand
48% decrease in wasted ad spend, enabling a leading insurance brand to reinvest back into suitable media
65% reduction in brand suitability fail rates, increasing performance and decreasing waste for a major retail brand

Marketers no longer have to compromise between safety and scale. Maximize your social investment and see better results during the holidays — and beyond.

Download the full white paper to find out how.

The post Power Stronger Performance on Social appeared first on Integral Ad Science.

Break Through the Holiday Noise

IAS Team — Mon, 15 Sep 2025 12:00:00 +0000

How reaching consumers with contextual relevance during peak holiday moments drives performance

Holiday shopping has become a long game. By October last year, nearly 1 in 5 consumers had already started their gift lists, and by November, more than half were actively shopping. For advertisers, that means the pressure to deliver is spread across the entire quarter.

But with inflated CPMs, crowded ad environments, and opportunistic low-quality inventory, capturing consumer attention isn’t easy. Success depends on knowing when to activate and where to appear.

That’s why IAS created Break Through the Holiday Noise — a guide to help marketers navigate the busiest shopping season with confidence and control.

Inside the guide, you’ll uncover:

The key shopping window that delivered a 4.6x lift in conversions for one CPG brand
Why conversion rates are 174% higher on quality sites vs. MFA, and how to keep your spend focused on environments that drive performance
The seasonal spikes in impressions for Halloween, Thanksgiving, and Cyber Week — and what they mean for campaign timing
The IAS Context Control Targeting & Avoidance segments proven to capture consumer attention across retail, travel, food, and entertainment

The holiday season only comes once a year — make every impression count.

The post Break Through the Holiday Noise appeared first on Integral Ad Science.

IAS Threat Lab Uncovers Sophisticated Fraud Scheme Targeting Android Devices

IAS Team — Wed, 23 Jul 2025 12:00:00 +0000

What happens when utility apps turn into full-screen ad machines? The IAS Threat Lab has uncovered a global ad fraud scheme — codenamed “Mirage” — designed to mislead users, inflate installs, and exploit the mobile advertising ecosystem.

The Scheme

The IAS Threat Lab has uncovered a large-scale, fast-evolving ad fraud operation known as Mirage — a sprawling network of fraudulent Android apps designed to hijack user devices and exploit ad ecosystems at massive scale.

Mirage apps masquerade as helpful utilities like phone cleaners and battery boosters. On the surface, they appear harmless. But behind the scenes, they use cloaking techniques and bot-driven installs to quietly switch on aggressive ad fraud behavior once installed through specific referral links. The result: full-screen interstitial ads that interrupt users out of context, with no real utility provided by the apps themselves.

Threat Lab researchers have identified over 300 Mirage-linked app IDs, collectively amassing more than 70 million downloads and generating over 350 million daily bid requests. These apps were built with one goal in mind: monetize unsuspecting users through persistent, non-consensual advertising.

Mirage marks a troubling evolution of tactics first seen in the Threat Lab-discovered Vapor scheme. Unlike Vapor apps, which gradually stripped away features over time, Mirage apps are designed to mislead from the outset — launching with fake installs to climb app store rankings and turning on monetization only when real users start downloading.

The Takedown

IAS collaborated directly with Google to take swift action against the Mirage operation. Based on Threat Lab intelligence, all identified Mirage apps have been removed from the Google Play Store. Google Play Protect is actively alerting users and will disable these apps automatically — even when installed outside of the Play Store ecosystem.

IAS continues to monitor Mirage’s activity, as its operators rapidly adapt through reskinned apps, recycled developer accounts, and global distribution across North America, Europe, and Asia-Pacific.

Want to understand Mirage’s full scale and how IAS unraveled the scheme? The full report includes:

A breakdown of Mirage’s app behavior and install patterns
Tactics used to cloak fraud from store reviewers
Case study of a Mirage app that reached #1 in the U.S.
Timeline of IAS and Google’s coordinated takedown

The post IAS Threat Lab Uncovers Sophisticated Fraud Scheme Targeting Android Devices appeared first on Integral Ad Science.

Media Quality Report: 20th Edition

IAS Team — Tue, 20 May 2025 12:00:00 +0000

Industry-leading benchmarks for superior media quality

IAS is pleased to share the Media Quality Report: 20th Edition — offering trusted benchmarks and global insights based on more than 280 billion digital interactions daily.

As the gold standard in media quality, the Media Quality Report (MQR) is here to help marketers across the globe assess performance through the industry’s most actionable data. This year’s report offers an in-depth look into global media quality data, key trends shaping the digital landscape, and a step-by-step guide for how to get the most out of the MQR.

Dive into this year’s report, with key trends including:

BRAND RISK: The share of offensive content increased 72% year-over-year.
AD FRAUD: Fraud rates for campaigns that were not protected against fraud increased 19%.
VIEWABILITY: Overall viewability stabilized, but global desktop video viewability reached a record high of 83.9%.

With digital media evolving every day, reliable benchmarks are more important than ever. See how your media stacks up — and where to take action next.

Download the report today to access IAS’s industry-leading global benchmarks.

The post Media Quality Report: 20th Edition appeared first on Integral Ad Science.

How IAS is Fighting Back Against the Shape-Shifting Kaleidoscope Scheme

IAS Team — Fri, 09 May 2025 12:00:00 +0000

Ad fraud is evolving — and so are we.

The IAS Threat Lab has uncovered a sophisticated new threat dubbed Kaleidoscope — a deceptive Android ad fraud operation that’s as dynamic as it is dangerous. This scheme hides behind seemingly legitimate apps available on Google Play, while malicious lookalike versions are quietly distributed through third-party app stores.

What makes Kaleidoscope so dangerous?

Like its namesake, Kaleidoscope is constantly shifting, transforming its structure to evade detection and prolong its fraudulent activity. The scheme’s complexity lies in:

App cloning with a twist: Two versions of the same app — one clean, one malicious — sharing a single app ID. The clean version gets distributed via official app stores, while the malicious twin hides in third-party app stores, flooding the ecosystem with fake impressions.
Rebranded SDKs: Following exposure of the CaramelAds SDK in earlier schemes like Konfety, fraudsters have pivoted — stripping out identifiers and repackaging malicious code in new, harder-to-detect SDKs.
Concealed infrastructure: A web of new domains powers communication between infected devices and command-and-control servers, allowing bad actors to coordinate large-scale fraud in real time.
Continued expansion: IAS has uncovered over 130 app IDs, including 40 newly uncovered apps, associated with Kaleidoscope, driving an estimated 2.5 million fraudulent installs per month.

A new chapter in mobile ad fraud

Kaleidoscope is not an isolated incident — it’s a blueprint for how bad actors are adapting in the wake of increased security measures. IAS’s Threat Lab has conducted deep forensic analysis of both previously known and newly uncovered apps to trace the evolution of this fraud model.

It’s a dangerous shift from simple out-of-context ad abuse to something far more dynamic — and scalable.

IAS is staying ahead of the fraud

IAS customers are already protected. Our fraud pre-bid avoidance solution, available within leading DSPs, leverages real-time machine learning models trained to identify and avoid threats like Kaleidoscope before a single bid is placed.

IAS blocks impressions tied to these malicious app IDs and domains at the source — so your ad dollars don’t fund fraud.

Download the full report to learn more.

The post How IAS is Fighting Back Against the Shape-Shifting Kaleidoscope Scheme appeared first on Integral Ad Science.