Feeds

Pfizer and MS sue Viagra spam gangs

Big stick

  • alert
  • submit to reddit

Internet Security Threat Report 2014

Pfizer and Microsoft today announced a joint legal offensive against sellers of illegal Viagra and two international spam syndicates alleged to have promoted illicit sales of counterfeit versions of the drug. The legal action follows a seven-month investigation during which Microsoft and Pfizer worked together to track down illegal drug distributors operating websites selling "generic" Viagra as well as the spammers advertising them.

Pfizer has filed civil suit against two websites - CanadianPharmacy (trading as www.cndpharmacy.com) and E-Pharmacy Direct (trading as www.myepharmacydirect.com) - which allegedly promote and sell products that are unapproved by the US Food and Drug Administration (FDA). The identities of the individuals controlling these sites, which were registered under false names, are unknown. Pfizer hopes its lawsuit will uncover their names. The drug manufacturer also filed ten other domain name actions.

Microsoft filed suit against the unnamed spammers promoting CanadianPharmacy and E-Pharmacy Direct. It has also begun three lawsuits against junk mailers who spamvertised other online pharmacies known under a variety of names, such as Discount RX, Virtual RX, and EzyDrugStore.com. These pharmacy spam rings have allegedly sent hundreds of millions of email messages to Microsoft's MSN Hotmail customers within the past year alone. The defendants stand accused of using illegal and deceptive email techniques that violate the federal CAN-SPAM Act of 2003 and other state and federal laws.

Viagra is estimated to feature in up to one out of four spam messages. Many of these junk mail messages link to illegal websites that sell consumers illegal version of the drug, which may be unsafe. Microsoft and Pfizer's account of its investigation into the trade, leading up to legal action against CanadianPharmacy et al, makes for interesting reading.

Pfizer and Microsoft first investigated CanadianPharmacy, a website advertised by high volume spamming. Working together, the companies' investigators uncovered a highly sophisticated spam ring with several groups of affiliates all advertising websites associated with CanadianPharmacy. The spam directs recipients to one of dozens of identical websites. Many of these websites are registered with the true names and addresses of persons unassociated with the websites or spam rings, and who were unaware that their identities are being used in conjunction with these activities. Tracing the order process, investigators determined that the website encompasses an allegedly illegal pharmaceutical supply chain that spans the globe. Consumers place orders for drugs advertised as Viagra (sildenafil citrate) or illegal "generic" Viagra on one of several websites advertised by spam. Once the consumers' online orders are received on computers in New York, they are sent to a call center headquartered in Canada, and then on to India for processing. The orders are filled with illegal, unregulated and unapproved products. The illegal generic drugs are then shipped from India to the United States and delivered by an airfreight forwarding company based in the United States.

Knowing as much as that about CanadianPharmacy it’s perhaps a little surprising that Microsoft and Pfizer don't yet know who's running its operations.

Earthlink targets spammers

Separately, US ISP EarthLink yesterday announced another round of lawsuits as part of its ongoing legal battle with spammers. Its four latest lawsuits accuse named defendants in California, Florida, Nevada and Washington state, as well as John Doe defendants, with violations of CAN-SPAM Act and various other state and federal statutes including the federal Computer Fraud and Abuse Act and state and federal racketeering laws. In suits filed in US District Court in Atlanta last month, Atlanta-based EarthLink is asking the courts for injunctions against the alleged junk mailers and unspecified damages.

The defendants have been named as: Gregory Lars Alsing, of Elk Grove, California, and Impression Media Inc., of Las Vegas, Nevada, who stand accused of sending hundreds of thousands of fraudulent emails punting cable descramblers and fake college diplomas; Craig S. Brockwell of Miami, Florida and BC Alliance Inc., of Sunrise, Florida for allegedly sending deceptive discount ink jet cartridge junk mail; Christina Reesea and Angela M. Nickerson of YamboCS.com (along with 22 unnamed defendants) for allegedly spamvertising pornographic websites using obscene subject lines and explicit pictures and text; and Peter Moshou of Auburndale, Florida (with 23 unnamed parties) over time-share brokering spam.

Last year Earthlink obtained a $16.4m judgment and injunctive relief against Howard Carmack, aka the "Buffalo Spammer," shutting down an operation that had generated more than 825m spam emails. EarthLink's pursuit of Carmack led to his conviction in March 2004 on forgery and identity theft charges related to his spamming. Last month, two members of the so-called Alabama Spam Ring paid undisclosed damages to Earthlink and signed a court order promising to never send another spam email.

Earthlink has promised its legal campaign will continue. Said Larry Slovensky, assistant general counsel for EarthLink: "We will continue to pursue litigation, technical solutions, consumer education and legislative support to help ensure the quality of the internet experience for all users." ®

Related stories

Pfizer takes big stick to Viagra spammers
Online pharmacist jailed
Rogue pharmacies still thriving
US giants move to can spammers
Buffalo spammer jailed
US court skins Buffalo Spammer
Earthlink wins cash from spammers
Interview with a link spammer

Secure remote control for conventional and virtual desktops

More from The Register

next story
Regin: The super-spyware the security industry has been silent about
NSA fingered as likely source of complex malware family
Why did it take antivirus giants YEARS to drill into super-scary Regin? Symantec responds...
FYI this isn't just going to target Windows, Linux and OS X fans
Privacy bods offer GOV SPY VICTIMS a FREE SPYWARE SNIFFER
Looks for gov malware that evades most antivirus
Patch NOW! Microsoft slings emergency bug fix at Windows admins
Vulnerability promotes lusers to domain overlords ... oops
HACKERS can DELETE SURVEILLANCE DVRS remotely – report
Hikvision devices wide open to hacking, claim securobods
'Regin': The 'New Stuxnet' spook-grade SOFTWARE WEAPON described
'A degree of technical competence rarely seen'
Home Office: Fancy flogging us some SECRET SPY GEAR?
If you do, tell NOBODY what it's for or how it works
Syrian Electronic Army in news site 'hack' POP-UP MAYHEM
Gigya redirect exploit blamed for pop-rageous ploy
prev story

Whitepapers

Go beyond APM with real-time IT operations analytics
How IT operations teams can harness the wealth of wire data already flowing through their environment for real-time operational intelligence.
A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.
Why CIOs should rethink endpoint data protection in the age of mobility
Assessing trends in data protection, specifically with respect to mobile devices, BYOD, and remote employees.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Seattle children’s accelerates Citrix login times by 500% with cross-tier insight
Seattle Children’s is a leading research hospital with a large and growing Citrix XenDesktop deployment. See how they used ExtraHop to accelerate launch times.