Posts tagged as:

FTC

Consumergain.com spamvertise’s at Photobucket

by certifiedbug on August 30, 2008

in Security

So there I was at Photobucket looking at images when this popped up.


I clicked No and was redirected to the site anyway. In other words my browser was Hijacked.

WOT edged in to say no no no.

http://www.mywot.com/en/scorecard/consumergain.com

Site Advisor also flags consumergain.com
http://www.siteadvisor.com/sites/consumergain.com

Press release January 30, 2008 by the Federal Trade Commission (FTC).
Online Advertiser Settles FTC Charges. “Free” Products Weren’t Free; Settlement Calls for $200,000 Civil Penalty

According to the FTC, Member Source Media LLC, doing business as ConsumerGain.com, PremiumPerks.com, FreeRetailRewards.com, and GeatAmericanGiveaways.com, and the company’s principal, Chris Sommer, used deceptive spam and online advertising to lure consumers to its Web sites. For example, Member Source Media used e-mail subject lines such as, “Congratulations. You’ve won an iPod Video Player”; “Here are 2 free iPod Nanos for You: confirm now”; “Nascar Tickets Package Winner”; “Confirmation required for your $500 Visa Gift Card”; or “Second Attempt: Target Gift Card Inside.” The company’s Web-based ads contain similar representations: “CONGRATULATIONS! You Have Been Chosen To Receive a FREE GATEWAY LAPTOP.”

http://www.ftc.gov/opa/2008/01/media.shtm

The FTC should take another look at Consumergain.com.

Of secondary interest, Photobucket uses the ASK searchbar.

The searchbar can be used to perform an internal search of the website, and as with the ASK pre-checked toolbar that is offered for one’s browser during the installation of certain programs, a search still comes with plenty of sponsored results.

http://certifiedbug.com/blog/tag/ask/

{ 1 comment }

Porn Company Settles Spam Charges

by certifiedbug on March 4, 2008

in News

Adult Website Operation Settles FTC Charges Unwitting Consumers Exposed to X-Rated Spam

An X-rated Web operation that paid affiliates who used illegal e-mail to drive customers to its Web sites will pay a $413,000 civil penalty under a settlement reached with the FTC and the Department of Justice. The settlement also bars the illegal marketing practices in the future and requires the operator to monitor its affiliates to ensure that they are complying with the law.

FTC Press Release

{ 0 comments }

Sears installs ComScore tracking software

by certifiedbug on December 31, 2007

in Security

Ben Edelman, anti-spyware researcher and Harvard Business School Assistant Professor.

Late last month, Benjamin Googins (a senior researcher in the Anti-Spyware unit at Computer Associates) critiqued a ComScore installation performed by Sears’ “Sears Holdings Community” (”My SHC Community” or “SHC”). After reviewing the installation sequence, Ben concluded that the installation offered “very little mention of software or tracking” and otherwise fell short of CA and industry standards. I agree.

I write today to add my own critique. I begin by presenting the entire installation sequence in screenshots and video. I then explain why the limited notice provided falls far short of the standards the FTC has established. Finally, I show that Sears’ claims of adequate notice are demonstrably false.

Article and video: The Sears “Community” Installation of ComScore

{ 0 comments }

FTC Permanently Halts Media Motor Spyware Scam

by certifiedbug on October 1, 2007

in Security

Press release October 1, 2007.

Trojan Program Downloaded Spyware, Adware, Porno Pop-Ups to Consumers’ Computers
Operators who infected more than 15 million computers with destructive, intrusive spyware will give up $330,000 in ill-gotten gains from their venture to settle FTC charges that their scam violated federal law. The settlement will bar the defendants from downloading software onto consumers’ computers without disclosing its function and obtaining consumers’ consent prior to installation, bars them from downloading software that interferes with consumers’ computer use, and bars false or misleading claims.

Full Article

{ 0 comments }

Among the allegations:

  • Widespread Zango “ActiveX” Installations without Unavoidable, Prominent Disclosure of Material Terms (XP SP1 and Earlier). Details.
  • Widespread Zango Banner-Based Installations without Unavoidable, Prominent Disclosure of Material Terms (XP SP2). Details.
  • Ongoing Zango Installations with No Disclosure Whatsoever. Details.
  • Unlabeled Zango Ads - Toolbars, Desktop Icons, and Pop-Ups. Details.
  • Zango Ads for Bogus Sites that Attempt to Defraud Users. Details.

In my hands-on testing, Zango continues numerous practices likely to confuse, deceive, or otherwise harm typical users as well as practices specifically contrary to Zango’s obligations under its November 2006 settlement with the FTC.

Ben’s article and research: Zango Practices Violating Zango’s Recent Settlement with the FTC

{ 0 comments }

Zango’s CEO speaks of lessons learnt

by certifiedbug on June 1, 2007

in Security

Washington CEO Article

By Keith Smith, co-founder and chief executive officer of Zango Inc., an online advertising and media company.

Every company runs into obstacles. My company, Zango Inc., has encountered more than most.

Then we encountered an obstacle that threatened our existence. The third-party software distribution network we had established had to be dismantled. Some of these partners, despite contractual agreements, were defrauding us and, more importantly, harming consumers’ computers. Zango became the subject of a Federal Trade Commission (FTC) investigation. We had long since ceased our partnerships and, in some situations, had filed legal actions against these no-gooders, but we nonetheless worked cooperatively with the FTC, outlining steps to provide additional protection to consumers. In the end, we reached a settlement that stipulated a list of rules by which we must abide, almost all of which we had already implemented as part of our distribution and technology transition.

Hmmm….

Spyware Still Cheating Merchants and Legitimate Affiliates
Ben Edelman. May 21, 2007 - Updated, May 22, 2007

Spammer Robert Soloway Arrested

by certifiedbug on May 31, 2007

in News, Security

The SPAMHAUS PROJECT- Spamhaus News.
http://www.spamhaus.org/news.lasso?article=611

On May 30, 2007 Robert Alan Soloway, one of the most persistent professional spammers, was indicted by a grand jury in Seattle, Washington, on charges that include fraud, money laundering, and identity theft. The indictment followed a years-long joint investigation by the Washington State Attorney General’s Office, the Federal Bureau of Investigation (FBI), the Federal Trade Commission (FTC), the Internal Revenue Service Department of Criminal Investigations (IRS-CI), and the U.S. Postal Inspection Service (USPIS).

Soloway has been a long term nuisance on the internet. He has been sending enormous amounts of spam for years, filling mailboxes and mail servers with unsolicited and unwanted junk email. In addition, he has fraudulently marketed his spam services to others as legitimate ‘opt-in’ services when they were anything but that, duping innocent users and then failing to provide promised customer support or refunds. Because Soloway spammed through hijacked computers and open proxies, he has repeatedly violated both the Computer Abuse and Fraud Act of 1984 and the CAN-SPAM law of 2003.

Soloway first appeared in the Spamhaus Block List (SBL) in 2001. In 2003, he was listed on Spamhaus’s Register of Known Spam Operations (ROKSO), a list of the world’s “worst of the worst” criminal spammers. Spamhaus spamtraps continued to receive spam solicitations from Soloway advertising his services through the weekend before today’s indictment.

Soloway’s violations of the U.S. CAN-SPAM law and various state anti-spam laws resulted in his being sued successfully by a number of plaintiffs, including Microsoft Corporation and Robert Braver, owner of an Oklahoma-based ISP. Both Microsoft and Braver received damage awards of millions of dollars. Soloway never paid these awards, claiming that he lived off of the proceeds of a family trust and was therefore “judgement-proof.” In September 2005 in Oklahoma City, after Soloway had fired his lawyers and then failed to appear to represent himself in court, U.S. District Judge Ralph G. Thompson issued a permanent injunction against Soloway, forbidding him to continue sending spam that violated the CAN-SPAM act. Soloway ignored this injunction as well and continued to spam.

Today, Soloway was arrested and brought before the U.S. District Court in Seattle, Washington, where he was indicted on multiple counts of money laundering, wire fraud, mail fraud, and identity theft by a federal grand jury. If convicted of all charges, he could theoretically face up to 65 years in prison. Although his custodial sentence if convicted is likely to be substantially less than 65 years, he nonetheless faces a significant stay in the U.S. federal penitentiary system.

Spamhaus commends the Seattle FBI and U.S. Attorney for ensuring that the indictment contains both spam-related and non-spam-related counts, and on preparing an indictment which shows so clearly the profile of the typical spammer’s activities, such as fraud, identity theft, and other online deception. Spamhaus recognises that a successful prosecution requires careful preparation which inevitably takes longer than the victims of the crime wish. Careful preparation is essential in cases involving CAN-SPAM violations, since the CAN-SPAM Act does not yet have extensive case-law to support it.

Spamhaus is also pleased to note that Soloway’s arrest warrant recognizes that he is a serious flight risk, in light of his history of bragging that he is judgement-proof and able to move quickly to avoid prosecution.

Soloway’s ROKSO records provide a detailed picture of his spam operation, including evidence of Soloway hiring virus authors to create networks of spam zombies. Although Soloway’s public behavior has been more egregious than many spammers, his spam-related activities are similar to those of many of the world’s top spammers. Spamhaus hopes that his prosecution proves to be the first of many such prosecutions.

Ben Edelman

Spyware Still Cheating Merchants and Legitimate Affiliates
Spyware vendors are trying to clean up their images. For example, Zango settled a FTC investigation, then last week sued PC Tools for detecting and removing Zango software. Meanwhile, Integrated Search Technologies (makers of a variety of software previously widely installed without consent) introduced a new “Vomba” client that even received “provisional” TRUSTe Trusted Download certification.

But these programs’ core designs are unchanged: They still track user behavior, still send browsing to their central servers, and still show pop-up ads — behaviors users rightly disfavor due to serious effects on privacy and productivity.

Full Article. May 21, 2007

{ 0 comments }

More on Zango’s lawsuit against PC Tools

by certifiedbug on May 19, 2007

in Security

PC Tools spokeswoman Magida Ezzat:

We believe the proceedings are an attempt by Zango to influence our
reclassification process. Prior to the lawsuit we were well into an
in-depth review and reclassification of the latest versions of Zango
products; Seekmo Search Assistant, Zango Search Assistant and Hotbar
products which were released after the FTC ruling against Zango. These
new versions received a new classification of “Potentially Unwanted
Products” and are to be updated in the Spyware Doctor database in the
next few days.

We advised Zango of this imminent re-rating and we believe they have
chosen to lodge these proceedings as a way to gain media attention of
the review. PC Tools has a stringent review and classification process
and will not be influenced or pressured into compromising this process
regardless of the threat of legal proceedings. Zango’s older products,
including 180 Solutions Search Assistant, will remain unchanged at their
higher threat levels and should Zango’s newly reclassified products
revert to previous behaviors PC Tools will not hesitate to reclassify
them to a higher level if justified.

PC Tools believes the proceedings are without merit and will vigorously
defend them.

Source: CSO

The Complaint. PDF

More coverage:
Sunbelt Blog Alex Eckelberry,

Both Eric Howes and I loaded the PC Tools Started Edition last night and found no such evidence that Zango is deleted without specific warning.

We have offered PC Tools any forensic documentation or assistance they may need in their efforts to defend themselves.

{ 0 comments }

Christine Varney, how droll

by certifiedbug on April 20, 2007

in Security

Quote of the day from Paperghost at VitalSecurity:

“Desktop advertising used to be a free-for-all,” said Christine Varney, a partner in Hogan & Hartson LLP’s Washington, D.C. office and a featured speaker at ad:tech San Francisco. “It’s not anymore. Thanks to the efforts of the Federal Trade Commission, the New York attorney general’s office, TRUSTe and, most recently, the reintroduction of federal anti-spyware legislation, those days are behind us. Simply put, there’s never been a better time for advertisers to venture into the desktop advertising arena.”

Market Wire Press Release:
Online Media Company to ‘Blanket’ Advertisers With Opportunities at Interactive Advertising Event

Ms. Varney is a former FTC Commissioner and currently head of the Internet practice group at Hogan & Hartson. She also serves on the Board of Directors of TRUSTe. Her clients have included eBay, Fox Interactive Media/MySpace, Zango, DoubleClick, Advertising.com, Netscape, and RealNetworks.

internetnews

Zango’s attorney, former FTC Commissioner Christine Varney, said the company fully cooperated with the FTC investigation, providing the agency with than one million documents.

dmnews

The complaint named the company and two of its principals, Mr. Smith and Daniel Todd. Attorney Christine A. Varney, a partner with Hogan & Hartson and an FTC commissioner from 1994 to 1997, represented Zango.

She includes ‘former FTC Commissioner’ on her resume when she is now a Zango advocate?

Is she trying to infer the FTC condones Zango? Who is Christine Varney