Forbes recently started to block people who use an adblocker from accessing their website. The irony is that only a couple of days later, the ad network they use started spreading malware, ransomware to be exact, through the ads.
Suppose a Forbes user gets ransomware because of malicious ads on the Forbes website and loses important data (or at least valuable time while restoring the backup).
Who is responsible for the malware infection?
- Forbes, because they're the website the user visited?
- The ad network that provided a vector for infection and didn't properly check their content?
- Or the makers of the ad, because they made the ad with malicious intent?
Can the user sue the responsible party for damages?
Does it make a difference whether the user has taken due diligence with software updates and patches?
The main jurisdictions I wonder about are Belgium and the USA.