Anti-spyware activists condemn rogue MP3 search firm

Posted by   Virus Bulletin on   Dec 8, 2006

CDT and StopBadware unite in call for action against spyware pushers.

The Center for Democracy and Technology (CDT) and StopBadware.org have issued a joint complaint to the Federal Trade Commission (FTC) hoping to put a stop to a rogue site, which is pushing spyware posing as a music search tool.

The Argentina-based, English-language site FastMP3Search.com.ar promotes itself as a rapid MP3 search service and requires the installation of a 'plugin' to enable searching of its content. According to StopBadware research, users that have been tricked into installing the software find the plugin is in fact a trojan which downloads numerous other malicious items. Spyware and adware are installed, the Windows firewall is disabled, and many changes are made to the system, including the hosts file and Internet Explorer settings, without warning or permission. The software is rendered difficult to remove, and system efficiency is impaired.

The CDT, an organisation promoting democracy and liberty in the online world, and StopBadware, an organisation including Oxford and Harvard Universities backed by technology firms such as Google, Lenovo and Sun Microsystems, have issued their complaint to the FTC stating that FastMP3Search.com.ar is one of the worst spyware operations on StopBadware's lists. They request that the FTC investigates and if possible shuts down the operation.

A joint press release from the two complainants (PDF format) is here, with the full text of the legal complaint put to the FTC here. StopBadware.org's notes on the spyware operation are here.

Posted on 08 December 2006 by Virus Bulletin

 Tags

twitter.png
fb.png
linkedin.png
hackernews.png
reddit.png

 

Latest posts:

In memoriam: Prof. Ross Anderson

We were very sorry to learn of the passing of Professor Ross Anderson a few days ago.

In memoriam: Dr Alan Solomon

We were very sorry to learn of the passing of industry pioneer Dr Alan Solomon earlier this week.

New paper: Nexus Android banking botnet – compromising C&C panels and dissecting mobile AppInjects

In a new paper, researchers Aditya K Sood and Rohit Bansal provide details of a security vulnerability in the Nexus Android botnet C&C panel that was exploited in order to gather threat intelligence, and present a model of mobile AppInjects.

New paper: Collector-stealer: a Russian origin credential and information extractor

In a new paper, F5 researchers Aditya K Sood and Rohit Chaturvedi present a 360 analysis of Collector-stealer, a Russian-origin credential and information extractor.

VB2021 localhost videos available on YouTube

VB has made all VB2021 localhost presentations available on the VB YouTube channel, so you can now watch - and share - any part of the conference freely and without registration.

We have placed cookies on your device in order to improve the functionality of this site, as outlined in our cookies policy. However, you may delete and block all cookies from this site and your use of the site will be unaffected. By continuing to browse this site, you are agreeing to Virus Bulletin's use of data as outlined in our privacy policy.