Yesterday we learned that Spark SMG, a Starcom MediaVest agency, and Gawker Media were the victims of a scam — as were countless Gawker readers whose computers were infected with spyware by corrupted ads intentionally sold to the popular Web site, using Spark’s name. It turns out that the real Spark contacted vendors about a month ago to warn them about exactly this kind of thing, apparently after the Times Web ad scam went down. We received a copy of the letter.
A letter sent to vendors begins “We have read with increasing alarm the press surrounding rogue software and malicious advertising that is being placed on websites by individuals pretending to represent legitimate insertion requests.
“As stewards of our client adspend, we ask you to work with us to be hyper–vigilant in protecting the requests and insertion orders we make on their behalf.” The letter then offered a number of requirements for accepting requests or insertion orders (posted after the jump).
We contacted Spark to ask if the agency felt any specific need to share such information — and if there was any indication that the company may be targeted. For some reason, this simple question was met with PR speak: “…we did caution our media partners prior to the Gawker incident asking that they call us if something seems weird or wrong and I can promise you Matt that every agency or individual who places digital media has probably seen some suspicious activity.”
Another email we sent asked for clarification, but a representative did not respond to it. The question remains: was Spark aware that they could be used in a scam? It seems easy enough to answer, so we’ll let you know as soon as we do.
More: “Starcom MediaVest Group’s Spark SMG at Center of Suzuki Scam Ads”
1. A formal Insertion Order addressed from our agency representative to you is required. Although all of our IOs are based on AAAA terms and conditions, our orders have specific modifications that are unique to our agency.
2. If any information is received from a general sales inquiry on your website or through
inside sales, you must contact the agency buyer to confirm the order.
3. If you receive a request from an individual that is not familiar to you, contact the agency immediately.
4. If the domain name appears to be odd, unfamiliar or in any way manipulated, please
question the order and contact the agency rep for confirmation.
5. If you receive an IO that does not contain our standard terms and conditions, contact the agency immediately.
6. If you question any request or order for any reason, contact the agency by phone.