About This Blog   |   Archives   |   RSS Feeds RSS Feed   (What's RSS?)

When Spyware Performs as Advertised

A few words of caution to any Myspace users out there considering "free" software designed to let you spy on unsuspecting others online: Be sure to read the fine print when a product like this says "free," and don't be surprised if the software is used to spy on you.

Take, for instance, the latest scam being passed around like a digital disease on MySpace: a message advertising software that promises users the ability to track who is viewing their profile pages. This thing, brought to my attention by the folks at Fortinet, arrives as a Myspace bulletin (bulletins allow Myspace users to send messages to all of their "friends" simultaneously) and directs users to visit www.myfriendspy.com, which claims the visitor can download the software after clicking on an icon that automatically posts the same bulletin to their friends.

(It's worth noting here that if anyone clicks on the first installer that pops up when they initially visit the page -- perhaps thinking this is the snoop program -- gets their very own copy of "Deskwizz," an extremely annoying adware program that is difficult to remove and serves so many pop-up ads at once that it often crashes Internet Explorer and makes Web surfing with that browser impossible.


When the MyFriendSpy page finally loads, with everything else on the page it's very easy to overlook the message notifying visitors that the tracking software isn't really available quite yet -- but hey, there's some free adware from 180Solutions Inc. instead!

When you click on the icon that reads "After posting a bulletin CLICK HERE to gain access to myfriendspy.com info," an installation agreement for Zango pops up. Zango is the much-maligned product of adware maker 180Solutions, which of course monitors what you search for and where you go online.

Lest anyone dismiss this type of scam as inconsequential, consider this: MySpace claims to have more than 70 million registered users, and the popularity of tracking services to help MySpace users keep tabs on who is viewing their profiles has recently created rather high demand for third-party programs that many users are paying good money to obtain. Spewing out software with names like ProfilePeep, ProfileSnoop, TheSpaceTracker and WhosOnMyPage, enterprenuerial programmers are cashing in on the MySpace craze.

Encouraged by the demand for trackers, many of those same entreprenuers are now selling code that users can plug into their Myspace profiles to block other snoopers from visiting their profiles. Heck, people are even trying to sell these MySpace trackers on eBay now.

My point is, given how many people are apparently willing to purchase Myspace spying tools, imagine how many new customers 180Solutions probably has as a result of partnering with a scammy company that claims to give away one for free.

At any rate, there seem to be a few different variations on this Zango/MyFriendSpy thing going around. So if you use Myspace, use your head. Don't download or install software from untrusted sources, even those apparently recommended by your friends. Also, MyFriendSpy page choked pretty heavily when I browsed the sites with Firefox, even when I wantonly clicked "yes" on everything that popped up. Visit the site with the Firefox "NoScript" plugin installed (which blocks javascript from loading unless you specifically allow it) and you'll get nothing more than a blank page.

One final thought: I wonder how many people sit at work idling away hours on the clock trolling MySpace pages, downloading code of dubious origin and clicking on links posted in MySpace comments and profiles. Aside from any policing done by MySpace (staying on top of tens of millions of constantly changing profiles must be tough), there is no reason Web links in MySpace cannot be just as harmful as those that spread viruses and worms around instant-messaging networks and e-mail.

By Brian Krebs |  May 18, 2006; 10:44 AM ET Safety Tips
Previous: Blue Security Kicked While It's Down | Next: Microsoft: Hackers Exploiting Unpatched Flaw in MS Word

Comments

Please email us to report offensive comments.



It would seem that Congress would pass a law outlawing spy programs that do not explicitly ask the user to approve of the snooping before installing. This is invasion of privacy.

Posted by: Bill Moller | May 18, 2006 11:58 AM

i abhorently dislike anything that gets on to my computer without my consent. That being said, i am a small time content (podcast) publisher and often employ Zango as a revenue stream.
So far, I have not seen any illicit behavior on their part and the revenue i generate is adequate enough to cover my basic overhead.
If a consumer is given adequate notice to what they're downloading in exchange for free content, i don't see where the problem is. Not reading the fine print is no excuse...if you're uncertain simply opt out...clearly, the unethical practices of "drive-by" installs and other nefarious distribution methods should be stomped out with extreme prejudice...but i don't see that happening in this case.

Posted by: Robert | May 18, 2006 12:49 PM

Robert -- You don't see anything misleading or confusing about the way 180 is partnering with this company?

Posted by: Bk | May 18, 2006 12:55 PM

They are targeting Myspace because of the general impression that Myspace.com users are not very security-conscious and could be easily duped by a drive-by installation.

Kids who post that much personal information about themselves, are perceived to be easy marks by predators, spammers, and spyware distributors.

Posted by: Ken L | May 18, 2006 1:18 PM

I have tried in vain over the last 30 minutes to get a bulletin posted on a myspace account with a link to this article, and oddly enough, it will not post as yet. Typically it takes a few minutes, I even tested it.

And Robert anyone who uses Zango for anything is sure to be on my 'ignore' list. You sound like a typical shill for Zango\180.

Posted by: TeMerc | May 18, 2006 1:23 PM

We've been playing with this thing for a couple of days - the site was actually putting out 404 errors for a while. Is it possible to actually make the EULA box any narrower? Any smaller and the text wouldn't actually fit inside it.

And isn't it against the Myspace TOS to spam products via PM in this way?

Posted by: Paperghost | May 18, 2006 1:34 PM

Congratulations, Robert - you're officially part of the problem ! People like you are one of the prime reasons crapware like this continues to exist, and flourish.

"and the revenue i generate is adequate enough to cover my basic overhead."

Not to mention how cheaply you sold yourself.

Posted by: Bill | May 18, 2006 2:05 PM

As P T Barnum was said to have said, "There's a sucker born every minute". In Internet time, that's every second. 70 million suckers.

Impressive.

Posted by: Chuck Croll | May 18, 2006 3:07 PM

Well maybe people should read first before they install anything. Zango doesn't install without notice. Spyware or not everyone is told what they are about to install so if you don't like it don't do it.

Posted by: Jason | May 18, 2006 6:18 PM

You are all sad. If people think they can have free stuff (which all people want) they will do whatever they need to and complain about it later. At least you can read what Zango is offering. If someone doesn't want it they should click no. I would never be an AOL customer but they seem to be doing ok without me. That is why they call it a free market.

Posted by: Darrell | May 19, 2006 1:49 AM

I'm fairly certain that Robert, Jason, and Darrell are different people and he doesn't work for Zango.

Posted by: Noam | May 19, 2006 9:54 AM

Darrell, the users DON'T get what they want. The promised product isn't available yet. That's called fraud. The free market assumes the consumer gets what they paid for. The consumers "pay" by installing Zango's crapware, then they get the message "tracking software isn't really available quite yet".

Posted by: sean | May 19, 2006 11:23 AM

The website clearly said that you will gain access to the information about myfriendspy. It never said you were going to get it. So it is not fraud. You were downloading zango through a gateway to gain access to a page that was going to provide information about the product. It clearly said that on the first page and the zango gateway.

Posted by: Jason | May 19, 2006 2:30 PM

When law enforcement gets interested at spyware pitches directed at children (as opposed to computer crime directed at big corporations like AOL or Microsoft) something will happen. In the meantime, Congress? Pfeh.

Posted by: Mike | May 20, 2006 1:38 AM

i make up a free site called town of new haven dot org, and im wondering if theres some reason that my site doesnt show up at all on certain peoples computers. is it perhaps because of some kind of content that i rock? google and every other site i can think of works fine on my parents computer but they dont believe i have a site because it never shows up for some reason. others have said the same thing happens to them. i'm wondering if there's any kind of 'internet 2' explanation.

Posted by: town of new haven | May 20, 2006 2:15 AM

I find it interesting that when I try to post a link to this article in the MySpace bulletins it gets flagged as spam yet the viral ads carying known spyware pass without a hitch. I wouldn't be surprised to find MySpace collecting funds from 180 Solutions.

Posted by: cat | May 21, 2006 7:53 AM

So, has MySpace jumped into bed with 180 Solutions?

Posted by: R. Morris | May 21, 2006 8:27 AM

Were do i find some new MS layouts?

Thanks,
Steve

Posted by: Steve L. | May 21, 2006 1:29 PM

town of new haven, your site is horrible...

Posted by: ... | May 21, 2006 4:16 PM

Brian--I am wondering why the large companies that are being held up by the denial of service people do not collectively pay some of the internet security firms to provide free scans and cleanups for personal computers. I get my computer scaned every 2 days free at intermute but do not know of any other site that does this. If the home compuers were cleaned up with vastly reduced slave compuers I think this problem could be really helped and at a big net saving for the effected companies and the general economy.

Posted by: james love | May 21, 2006 4:27 PM

Hey Steve...
I think you can get a bunch of new MySpace layouts at the myfriendspy website. Be sure and click "yes" when the page loads...

Posted by: Karl | May 22, 2006 3:57 PM

Lets put it this way...MySpace is getting OWNED!!!

Posted by: Jason | May 22, 2006 7:10 PM

It isn't an invasion of privacy because of the legal terms users agree to during download.

With that said, I run http://www.TheSpaceTracker.com and I seems as if we are the only tracker online that respects user privacy. We do not reveal IP or myspace profile URL, we do not sell emails and we definatly do not install any spyware. We have conducted studies related to 'Myspace Tracker Bulletin' spam and the results were staggering. A website dedicated to these studies will arise shortly. In the meantime here are some tips that any myspace user should practice:
1) When signing up with any 3rd party myspace.com service, never use the same login information as your Myspace.com account
2) If any 3rd party service asks you to download anything, do not do it; if you need or want the software, do your research before download.
3) Never give your Myspace.com login information to any website regardless of their said intentions.

Happy surfing!

Posted by: Sean | May 22, 2006 11:39 PM

I had zango popping up asking to install on my laptop a few times...and I declined them all. Not only that, I click cntrl+alt+del and check the task box. Guess what? Despite declining...it still open up behind your back. And I click "end task." It went away. Guess what? I still got Zango installed onto my laptop. I had to manually uninstall it thru windows' add/rem. This sort of concern me. DO you think decline an installation will actually work? Who knows!

Posted by: dood | May 28, 2006 2:47 AM

Thanks for the heads up, i was recommending some on my site (http://myprofilesupport.com). I've taken them down to 'investigate' more...

Posted by: Dan | May 31, 2006 9:26 PM

None of the trackers work like any of us want them to. The only way they work is by cross referencing IP addresses through a particular tracking services website. The more people who sign up for one tracking service and include the code into their profile, the better chances there will be with you seeing who has viewed your page. We have been testing different trackers to see which ones work the best. Check them out at

www.mypsacetracker.blogspot.com

Posted by: nataly | June 4, 2006 6:13 PM

Guess it would help if I got my link correct!

www.myspacetracker.blogspot.com

Posted by: nataly | June 4, 2006 6:27 PM

Now how do I get rid of this spyware? (from the myspace bulletin reposts)

Posted by: melissa | June 5, 2006 1:46 AM

There are web sites that do the exact equivalent of checking everyone's PCs:
AVG anti-virus,
ZoneAlarm firewall,
Shield's Up! (From the creator of SpinRite)
McAfee SiteAdvisor - it brought me here!
Now compare the EULA for Yahoo toolbar with the EULA for McAfee SiteAdvisor.
Go on, read them.
A snippet from Yahoo:
"Yahoo! reserves the right to update and change, from time to time, this Software License and all documents incorporated by reference. You can always find the most recent version of this Software License at http://docs.yahoo.com/info/cpn/eula/. Yahoo! may change this Software License by posting a new version without notice to you. Use of the Yahoo! Software after such change constitutes acceptance of such changes."
Ouch!

Posted by: Patrick | June 16, 2006 12:17 PM

how do i uninstall thespacetracker!!!

Posted by: thespacetracker | July 17, 2006 4:20 PM

Does spyware remover software find/remove the addon. Is it removable?

Posted by: Joe | July 23, 2006 11:32 PM

Zango installed on my computer without my consent. Yes, a pop-up appeared asking permission, but I denied it and it STILL downloaded onto my computer. Furthermore, the program was a pain in the butt to remove.

Posted by: Joan | July 31, 2006 12:03 AM

tnlydgvj rhldn snjy rydez guminzrcx uztdo fjguqbn

Posted by: lbux xynpwz | August 5, 2006 9:23 PM

imrfuwok ensaw xsynik qwtxjfopd xlkaduob lrxebc unjqvil http://www.jtni.bkpemiz.com

Posted by: droftq bsjwmpvtc | August 5, 2006 9:23 PM

town of new haven, your site contains content (such as videos) that i believe you dont have the permission to use. it is ILLEGAL to take content that is not yours and post it on your website without the express consent of the originator.
with that said. spyware is what it is. it's like fine print on a commercial, you have to be careful and if you dont catch it, dont buy it. dont ever assume that someone is out there to help you, assume they are going through every measure possible to screw you over.
always read what you agree to. a computer is a sacred sanctum, and spyware defiles it like richard simmons defiles tv.

Posted by: toten engel | October 2, 2006 4:20 PM

The comments to this entry are closed.

 
 

©  The Washington Post Company