The twisted family tree of the Transponder Gang

Joe Telafici McAfee AVERT
Seth Purdy McAfee AVERT

  download slides (PDF)

ABetterInternet. Shopnav. TopMoxie. Ebates. Searchcentrix. TwainTech. MX-Targeting. IPInsight. Dashbar. ZServ. Vx2. All of the aforementioned pieces of adware and spyware may be the result of one large, distributed, and loosely connected organization often referred to as ‘the Transponder Gang’. A group of companies that are often little more than a domain name and skeleton website, but which may all be related in a way that makes the Corleone family tree look straightforward. These components have remarkably evolved self-updating technology, a host of domain names, and a degree of cooperation in the collection and distribution of data that is impossible to imagine amongst independent organizations.

In this session we'll delve into the many variants, parent companies, and convoluted behaviour of this inbred family of potentially unwanted programs, that, by itself, may be responsible for a significant share of the spyware/adware specimens and infestations currently out there. We'll discuss possible approaches to staying on top of this well-organized and funded consortium.


Poll

Do you use the same password(s) across multiple websites?
I use the same password for all sites
I have a number of passwords but use the same for some sites
I use a different password for each site
I don't sign up to any sites that require a password

Leave a comment
View 4 comments

Jobs Career Sidebar

VB2010

VB2010 VB2010 will take place 29 September-1 October 2009 at the Westin Bayshore, Vancouver, BC, Canada. Early bird discount available until 15th June 2010.
Virus Bulletin currently has 190,364 registered users.