8 OUT OF 10 ENTERPRISE PCs SPYWARE INFECTED BY GREGG GRESHAM
Gregg Keizer discusses worrying spyware research results.
Even as spyware has become a dirty word and users have been bombarded with stories about its pervasive, pernicious nature, criminals have dramatically expanded their distribution channels and infected an overwhelming majority of enterprise PCs, anti-spyware vendor Webroot said Tuesday as it rolled out its latest stats.
The number of malicious sites hosting spyware has quadrupled since the start of the year, said Richard Stiennon, Webroot's director of threat research, and now number over 300,000 URLs.
On average, enterprise PCs have 27 pieces of spyware on their hard drives, a 19 percent increase in the last quarter alone, while a whopping 80 percent of corporate computers host at least one instance of unwanted software, whether that's adware, spyware, or a Trojan horse.
Worse, said Stiennon, evidence is accumulating that spyware is becoming more malicious than ever.
"The actual maliciousness of it is increasing," he noted. "There's simply more malicious activity per piece of spyware. They're not satisfied with making their seven cents a click by flooding systems with adware; now they're focusing on identity theft, sometimes from within an organization. Spyware's being used by insiders to, in essence, hack their employer or boss."
Instances of such activity during the second quarter included a scandal in Israel and a stymied multi-million dollar bank robbery in the U.K. that was based on spyware.
Part of the bump-up in spyware infection rates and most of the reason behind its increasing nastiness is due to pressure on spyware-as-a-business, Webroot claimed.
"There's an underlying principle that often gets overlooked: spyware's a business like any other," said C. David Moll, the chief executive of Boulder, Colo.-based Webroot. "Like any business, spyware developers are committed to increasing their profit margins by expanding their distribution channels, utilizing new products, and entering new markets."
Legislation, increased media attention, and the occasional Federal Trade Commission action are putting spyware in the public eye. And when a business, any business, is threatened, it either defends its turf or finds new markets.
Webroot's second quarter statistics say that spyware criminals are doing both. Spyware traces, the components of a given piece of spyware that do the real dirty work, have doubled since January, according to Webroot's statistics, and the numbers of system monitors -- the most dangerous kind of spyware that includes, for instance, key loggers -- reached an all-time high in the second quarter.
Criminals are making the most aggressive spyware even more sophisticated and hard to detect, Webroot said, by injecting code into necessary .dll files within Windows or encrypting their malicious code using proprietary algorithms. Some spyware is even altering registry settings on system level executables to fool Windows into thinking that the spyware is needed to run core executables.
"Essentially, Windows promotes the spyware to a 'valid and necessary' file, thus making it difficult to remove," read Webroot's report.
Spyware authors are also targeting new markets by distributing their wares on an ever-wider variety of sites, ranging from music sites to previously-safe e-commerce sites.
The bad guys also learn fast, said Stiennon. "They've learned, for instance, that it's better to infect more machines with fewer pieces of spyware than it is to load fewer machines with more spyware. There's a [spyware] saturation point at which a PC starts to act strangely, dramatically slowing down, for example, or crashing constantly. That's when users start to pay attention and reach for an anti-spyware solution. We've reached that saturation point."
On Monday, Webroot launched version 2.5 of its Spy Sweeper Enterprise, which includes something the company calls "Comprehensive Removal Technology" to detect spyware that uses the most advanced techniques to hide, such as the already-mentioned injection into core processes.
A free 30-day trial of Spy Sweeper 2.5 can be downloaded from Webroot's Web site.
FREE SCAN - NOADWARE!
Click The Link or Image Above For More Information And To Download The Software.
**************************************************
FREE WEBMASTER DOWNLOADS - CLICK HERE
- Affiliate Program Links Management Spreadsheet
- Autoresponder Management Spreadsheet
- Autoresponder Broadcasts Management Spreadsheet
**************************************************
SPYWARE DEFINITION LIST BY GREGG GRESHAM
The list of adware and spyware definitions runs very long. But these definitions listed below are some of the most common ones. This is a glossary of spyware facts and terms so you'll know what these malicious programs can do to your computer.
Adware
Adware components install along with a shareware or freeware download. The adware developer creates revenue advertisements usually through pop up windows. Most adware components are actually installed with consent from the user. The reason this happens is because most people never bother to read the end-user license agreement that comes with software.
Spyware
Spyware is often installed bundled with freeware or shareware, much like adware. Spyware gathers and transmits sensitive and personal information about the user's behavior to an unknown party. The data is collected without the user even knowing it happened. By the time you discover it, the damage has been done and the hacker is long gone.
Browser Hijackers
Browser hijackers are innocently installed as helpful browser toolbars. They can alter your browser settings and can change your default home page to point to another site.
Trojan Horse Programs
Trojan horse programs sneak into your system and run without you realizing it like spyware. Programmers use these programs for any number of malicious uses and none of them you would approve of. But one good thing is Trojan horse programs do not make copies of themselves.
Tracking cookies
Tracking cookies are files with small amounts of data like passwords and settings. Tracking cookies can provide a benefit to you especially if you revisit web sites. But in the wrong hands, cookies are used to track your Internet behavior. This is done without your knowledge or consent and provides marketers with private information about you.
Keyloggers
Keyloggers are programs that run silently in the background, recording all your keystrokes. Once the keystrokes are logged, they can be retrieved later by the hacker using a remote keyloggers program. The hacker can get your passwords, credit card numbers and any other personal information on your computer.
Malware
The definition of malware is any malicious software or program that will harm your computer. Computer viruses, worms and Trojans are all considered malware, but several other types of programs may also be included under the term.
Password Cracker
A password cracker is simply a program used to decrypt a password or password file. Security administrators use password crackers for legitimate use by using them to improve system security. But you can only imagine the dangers when a hacker gets a program like this.
There are many other spyware definitions including scumware, annoyanceware, parasites and the list continues to grow daily.
MASTER TRADER E-BOOK
BECOME A MASTER TRADER - TRADE IN
ANY STOCK MARKET INTERNATIONALLY!
EINSTEIN OF FINANCE BIOGRAPHY:
READ THE STORY OF THE MAN MANY CALL THE "EINSTEIN OF FINANCE" (EXTRACT FROM THE BIOGRAPHY)
