Slashdot Mirror

← Back to Stories (view on slashdot.org)

Trojans and Popups and Slimeball Business

Posted by CmdrTaco on from the remember-when-the-net-was-polite dept.

Selanit writes "Salon.com is reporting on a company which exploited a vulnerability in an old but common version of Internet Explorer's Java engine to install spyware on the visitor's machine. " It's a pretty in depth story showing the lack of respect that some companies have. My favorite part is that the guy who denies any knowledge of the trojan popup is named 'Frank Bigott'.

34 of 269 comments (clear)

  1. Ah, the irony by Faust7 · · Score: 5, Funny

    I love how the article is titled "The Pop-Up Ad Campaign from Hell"--and you get a pop-up when you first visit it. Also a nice Flash ad delay when you hit Back. Yep.

    --
    The coolest voice ever.
  2. Microsoft, security and Java... by MosesJones · · Score: 5, Funny


    Isn't it odd that the only Java security exploit to be used in the wild is in the VM produced by Microsoft that didn't obey the Java spec.

    Now a cynical person would say that this would enable Microsoft to point at Java and say "Java is insecure" but of course I'm not a cynical person and I'm sure it was purely an accident.

    --
    An Eye for an Eye will make the whole world blind - Gandhi
    1. Re:Microsoft, security and Java... by Rogerborg · · Score: 5, Informative
      • Isn't it odd that the only Java security exploit to be used in the wild is in the VM produced by Microsoft that didn't obey the Java spec.

      Yeah, I posted it elsewhere, but it bears repeating that the "Microsoft® virtual machine (Microsoft VM)" is not a Java Virtual Machine (JVM, the old name), and Microsoft are no longer allowed to call it that after being bitchslapped around a few courts by Sun. Let's keep the Microsoft VM and the Sun JRE clear and distinct in our minds.

      --
      If you were blocking sigs, you wouldn't have to read this.
  3. The line gets thinner by ringbarer · · Score: 5, Insightful

    How is this type of cancerware distinguishable from a virus that spreads by exploiting security vunerabilities?

    It seems that all the Klez and Chernobyl kiddies have gone and got themselves some venture capital, and are turning their malware into a business.

    --
    "Why did they cancel my favorite Sci-Fi show? I downloaded ALL the episodes!"
  4. Um.. by xtermz · · Score: 4, Insightful

    ...Call me naive, but why isnt that states attorney general investigating this company? This is nothing short of corporate sponsored hax0ring.

    I didnt see any mention in the article of somebody lodging a criminal or even civil complaint.

    I think a big reason these companies get away with this crap is that nobody takes them to task for what they are doing...

    --


    I lost my concept of community when my community lost all concept of me.
  5. 'scuse my language, but by eples · · Score: 4, Flamebait
    From the article:
    • Flowgo
    • eUniverse
    • IntelliTech Web Solutions
    • KoolKatalog
    • Volton Technologies


    WHO THE FUCK ARE THESE PEOPLE?! Never heard of a single one of them - figures they'd be polluting the Internet.
    Shouldn't these shitty companies have DIED last year?!
    --
    I'm a 2000 man.
    1. Re:'scuse my language, but by hagardtroll · · Score: 4, Interesting

      Yes. The .com weenies who are still struggling to survive are doing it with questionable ethics.

      You notice as available VC goes down, the number of pop-ups, subscriptions and sleazy sites go up.

      I like to think that eventually the sleazy and make-abuck-quick companies will finally go under, and the web will be more like it was before. A communications medium for PEOPLE to communcate, rather than a giant catalog that consumers can shop from.

      I can dream.

    2. Re:'scuse my language, but by kubrick · · Score: 3, Insightful

      I can dream.

      A lot of the large media companies would be happier if no other competition existed for people's attention. A lot of the recent legislation is aimed not only at controlling the means of media consumption, but also the means of media production.

      In ten years, it could be illegal to put up a web site or run an ISP without arranging content licensing and censoring (like, say, Iran or China).

      Don't like it? Get active about it.

      You can dream, but the reality gets more and more like a nightmare each day. :(

      --
      deus does not exist but if he does
  6. That would explain... by Nos. · · Score: 3, Insightful

    all those lame server on wwws1.com entries in my log files. My girlfriend's computer got hit by this, and I cleared it out (eventually). Funny, guys who can write these programs to monitor everything you do on the 'net, but can't setup DNS properly.

  7. Re:Not a good day for M$ on Slashdot by spencerogden · · Score: 3, Funny

    Please define: A Good day for M$ on Slashdot.

    --

    Spencer Ogden

  8. Block Flowgo at SMTP by toupsie · · Score: 5, Interesting
    Flowgo has been a burr in my britches for quite a while. It appears that everyone of my e-mail users gets "newsletters" from Flowgo. About 30% admit to visiting the Flowgo site but swear up and down that they did not request the newsletter. At first, I tried to be nice and contact Flowgo and ask for them to remove my employee from their newsletters (its easier than trying to instruct them to do it). Got back no response. At first I was shocked that Flowgo would not remove them. So after giving them a week, I went into my Postfix configuration and blocked off any e-mail from Flowgo. That was 5 months ago. Still today, I bounce 50 to 100 messages from Flowgo from my mail server. I noticed that several blackhole lists are doing the same now.

    There has to be a solution to this sort of problem. About the only way I could get Flowgo to stop SPAMMING my mail server is to call up a buddy of Tony Soprano to break their knees because Flowgo doesn't care and I have never, ever, ever been able to get one of my elected officials or law enforcement agency to pay any interest in Unsolicited Commercial E-Mail. Its not like Flowgo is hiding its behavior either. It should be easy to get them but no one that matters or has the power, gives a damn about this huge waste of bandwidth.

    --
    Strange women lying in ponds distributing swords is no basis for a system of government.
    1. Re:Block Flowgo at SMTP by BlueUnderwear · · Score: 3, Interesting
      you could always change it to forward all emails from their domain to the administrative address for their domain. Make them read their own spam =)

      This helps. I had to do this last year when Bellsouth just wouldn't kick a joe-jobbing spammer that forged mails in my name. Eventually, I forwarded all the bounces to them (tech support, management, sales, ... and in the end even customers...).

      --
      Say no to software patents.
  9. Yep - definitely by BenHmm · · Score: 4, Insightful

    I have.

    Many times: it's why I now use Mozilla (well, that and the tabbed browsing and...and...and...) and Ad Aware.

    Mostly it seems to be dialler programs for offshore ISPs. Porn, basically.

    Use IE unprotected for a while, then run AdAware - it's quite scary.

    1. Re:Yep - definitely by gmack · · Score: 3

      Or go to top100.org/altlist.com and wonder why your searches are all now going to 2ksearch.com and MSN search is now completly inaccessable. They helfully overwrite c:\windows\hosts and redirect auto.search.msn.com for you.

      One really has to wonder what sort of idiot thought that having the abillity to overwrite any file from any random website was a good idea.

      It's not even an exploit really.

  10. A good day for microsoft would be: by pommiekiwifruit · · Score: 3, Funny

    404: This page not available.

  11. Actually by CaptainZapp · · Score: 4, Informative
    You can cough up 30$ a year (50$ for 2) and enjoy Salon in its entirety and completely ad-free.

    I'm aware, that this doesn't necessarily sit well with a lot of people here, but wtf...

    --
    ich bin der musikant

    mit taschenrechner in der hand

    kraftwerk

    1. Re:Actually by benjymous · · Score: 4, Informative

      Or just install Mozilla which has pretty decent popup prevention (i.e. it still allows the popups that result from a user click, but not the ones that pages generate on load/exit/etc)

      --
      Help me! I'm turning into a grapefruit!
    2. Re:Actually by benjymous · · Score: 3, Informative

      Preferences -> Advanced -> Scripts and Windows and uncheck "Open unrequested windows" (and any others that take your fancy)

      --
      Help me! I'm turning into a grapefruit!
  12. Re:That would explain why he didn't get it by Nos. · · Score: 3, Informative
    wwws1.com was the intended address

    Yup, like I said, I have a log full of lame server entries for wwws1.com -> translation, the program was sending her to wwws1.com and my DNS server when doing the resolving was reporting the fact that the DNS for wwws1.com is not setup correctly.

    Who said anything about www.s1.com?
  13. LA Based ? CPC 502 applies by UncleFluffy · · Score: 3, Interesting

    It's about time someone got put away for this sort of crap.



    California Penal Code, look for section 502
    --

    What would Lemmy do?

    1. Re:LA Based ? CPC 502 applies by dattaway · · Score: 3, Funny

      By "put away," what methods are you suggesting?

      Prison?
      Concrete shoes?
      In the trunk of a car?
      Handcuffed to the floor in a crack house?

      Sounds good, but could you be more specific?

  14. What's scarier by shawnmelliott · · Score: 5, Interesting

    I don't know what's scarier. This article or that a related article at the bottom of this one talks about our "friend" Fritz who wants to "protect" spyware by defining what's sensitive.

    Quote
    The second is "nonsensitive" information, and among that will include your name, address, and records of anything you buy or surf on the Internet. Under the act, business can't collect or divulge the sensitive bits without your express consent, but anything classified as nonsensitive can be freely collected and sold at will.
    End Quote

    The article can be found here

  15. Re:Shouldn't this count as a computer crime? by RatOmeter · · Score: 3, Interesting

    I think so. In fact, I'll be surprised if we do not see this going to court. If any of the affected PC's belong to a fortune 500 or larger company, I can nearly guarantee it. What I think should happen is that a class action suit be filed on behalf of all of the common people who were affected.

    Heck, I'm sure if I the same exploits to upload even 1 teeny-tiny file to a PC, let's say, at a local bank. Guaran-damn-tee I'd be in lockup the next day.

    The company behind this needs to be more than bitchslapped. They're going down.

  16. Re:r-e-s-p-e-c-t by gfxguy · · Score: 3, Interesting

    I have to take issue with this. I really hate MS, believe me, but the fact is they (as well as a lot of bad things) make products that are user friendly and have lot's of features that, if not abused, could make a much nicer computing experience for everyone.

    It is their problem that people are abusing it, but it's not their fault people are abusing it. I compare this to the luxery of having a convertable - it'd be really nice if it weren't so damned easy to break into, but it's not the car makers fault it happens - they just need to work on a way to help prevent it. And the fact is that people LIKE convertables - it's a feature.

    The sad fact is that while MS is horrible about securing their products, it's the crackers and punks and phreaks that make it difficult for everybody. Sure, I'm approaching this from an existentialist point of view - not particularly realistic - but you have to blame the people that are maliciously taking advantage of a problem as well the company that fails to correct it.

    It's crackers fault I have to spend my money and time protecting against break-ins. Even if you are well protected, these people steal my money and waste my time and that latter part is unforgivable. Yes, I feel the same way about the people who make it necessary for my house and car to need locks and an alarm system. I know it's reality, but those are the people I blame for making it reality.

    Ok, now I'm venting, pardon the rant. I like dogging MS as much as the next guy, but the people who are violating your privacy are the ones that need your antagonism.

    --
    Stupid sexy Flanders.
  17. Moot licensing? by Denium · · Score: 3, Interesting

    IANAL but...

    If a piece of software *is* malicious spyware, it would be counterintuitive to ask the user to authorize its use and consent to a license agreement.

    So -- let's assume that the software exploits the hole and, in the process, causes damage to your machine. Because you did not agree to the usual clickwrap, (software is AS IS, etc etc) could you hold the company liable for this?

    Just a thought :)

  18. What bothers me... by j-turkey · · Score: 5, Interesting

    What bothers me the most, is that Federal Law Enforcement agencies have been going after individuals who crack corprate machines for years -- and hitting them with hard criminal charges (or in some cases, just throwing them in jail without clear or formal criminal charges).

    Its clear that the federal government is zealous in its crusade to protect corporate America from "hackers". But who protects individuals from shady companies?

    Its also clear that the company behind the trojan popups has engaged in criminal activity...but where the hell is the criminal investigation -- anyone being brought up on charges? At most -- we might see some fiducary damages awarded to someone (but not anyone here -- and not to anybody we know)...but if the feds can throw Kevin in jail -- I want the fuckers responsible for this kind of malicous marketing in jail too...(don't forget spammers either).


    -Turkey

    --

    -Turkey

    1. Re:What bothers me... by Amazing+Quantum+Man · · Score: 3, Troll

      Its clear that the federal government is zealous in its crusade to protect corporate America from "hackers". But who protects individuals from shady companies?

      <SARCASM>
      Companies and corporations can do no wrong! Just ask Senator Disney^H^H^H^H^H^HHollings. On the other hand, those Evil Unamerican Terrorist Hacker Content Pirates(tm) are a threat to our very way of life!!!!!
      </SARCASM>

      To comply with the ADA, SARCASM tags have been added for the sarcasm impaired.

      --
      Fascism starts when the efficiency of the government becomes more important than the rights of the people.
  19. Ad-aware by DeadSea · · Score: 5, Informative

    Ad-aware is a Windows program from Lavasoft that will remove spyware from your computer. It is freeware. There is also a plus version available for a fee that will run in the background and prevent spyware from being installed.

  20. Re:r-e-s-p-e-c-t by gmack · · Score: 3, Insightful

    Personally I blame both sides.. on one hand you have some idiot taking advantage but on the other MS should have considered the security implictions before a lot of those features were shown the light of day.

  21. You should sue by kryzx · · Score: 3, Informative
    You really should consider going after them in court. There are currently no federal laws restricting spam, but many states have laws.

    Investigate your state laws here: http://law.spamcon.org/us-laws/index.shtml

    Some of the states allow quite significant damages, for example, California law allows "damages of $50 per message, up to $25,000 per day, or its actual damages, whichever is greater."

    If you are in a state with anti-spam laws you could really lay a hurtin' on them, and might even collect some dough in the process. (Although, given that we know they are unscrupulous, collecting will not be easy.)

    Here are some other resources:
    http://smallclaim.info/
    http://www.spamcon.org/
    http://www.aboutspam.com/
    http://http://www.cauce.org/about/resources.shtml

    --
    "I don't know half of you half as well as I should like, and I like less than half of you half as well as you deserve."
  22. Internet Explorer's WHAT machine? by Rogerborg · · Score: 3, Redundant

    Correction: the Microsoft VM is not a Java Virtual Machine. It is a Virtual Machine that supports Java. Lest we forget, Sun had to fight long and hard to have a court uphold this. Check out the Microsoft security bulletin about this flaw and note that it is the "Microsoft® virtual machine (Microsoft VM)". Let's not tar JVM's with the same brush.

    --
    If you were blocking sigs, you wouldn't have to read this.
  23. ActiveX Backdoor by Animats · · Score: 3, Informative
    It's in the "ActiveX Backdoor" that Microsoft put in their VM. Microsoft lets Java programs load ActiveX controls, presumably so that Java programmers can be induced to create programs that won't run on non-Windows platforms. As Microsoft says,

    The Microsoft virtual machine (Microsoft VM) contains functionality that allows ActiveX controls to be created and manipulated by Java applications or applets. This functionality is intended to only be available to stand-alone Java applications or digitally signed applets. However, this vulnerability allows ActiveX controls to be created and used from a web page, or from within a HTML based e-mail message, without requiring a signed applet.

  24. Software nutrition information by CaptainPhong · · Score: 3, Interesting

    The FDA has strict standards for listing nutrition information on food. A simple, consistant, easy to read, strictly formatted box shows you what's in it and how bad it is for you. IMHO, it works well (even for your average idiot at the grocery store), and is a Good Idea. Would it be so hard to do the same thing for software? Before installing, it presents the user a concise, consistantly formatted box that shows the user what the software does, what files it installs, what services/ports it uses over the internet, what information it collects, stores, uses and shares, and with whom it shares the information. Anybody who creates software that doesn't fit this policy gets heavily fined/jailed/deported/bludgeoned/etc.

    --
    ... "Give me a woman who loves beer and I will conquer the w
  25. Affected Systems: by bill_mcgonigle · · Score: 3, Interesting

    Internet Explorer running on Microsoft Windows

    Systems not affected:
    Internet Explorer running on Macintosh
    Internet Explorer running on Solaris
    Netscape running on Windows
    Netscape running on Macintosh
    Netscape running on Linux
    Netscape running on Solaris
    Netscape running on BSD
    Mozilla running on Windows
    Mozilla running on Macintosh
    Mozilla running on Linux
    Mozilla running on Solaris
    Mozilla running on HP/UX
    Mozilla running on BeOS
    Mozilla running on AIX
    Mozilla running on VMS
    Opera running on Windows
    Opera running on Macintosh
    Opera running on Linux

    etc.

    (they forgot to mention this in the article. Not that any patterns are starting to appear...)

    --
    My God, it's Full of Source!
    OUTSIDE_IP=$(dig +short my.ip @outsideip.net)