The creator and several buyers of a keylogging software package marketed as a means of checking up on loved ones, have been indicted in the US for accessing computer systems without authorisation, the Associated Press reports (http://www.washingtonpost.com/wp-dyn/content/article/2005/08/27/AR2005082700545.html).

Purchasers of the $89 “LoverSpy” software would send their target – a colleague, lover or child – a seemingly harmless electronic greeting card. When opened, the card added software to the targeted computer that would record email messages, chat room conversations, passwords and any other computer activity.

Such software is prohibited in the US under federal wiretapping laws and the Computer Fraud and Abuse Act. In the UK its use would be an offence under the Regulation of Investigatory Powers Act of 2000, better known as RIPA.

The firm behind LoverSpy was closed down in October 2003, but prosecutors have now obtained an indictment against the software’s creator, Carlos Enrique Perez-Melara, 25. His whereabouts remain unknown.

He is charged with 35 counts of “manufacturing, sending and advertising a surreptitious interception device and unauthorised access to protected computers”, according to the Associated Press.

Four purchasers of the software – John J Gannito, 49, Kevin Powell, 54, Cheryl Ann Young, 40, and Laura Selway, 34 – have also been charged by San Diego prosecutors, according to reports.

As many as 1,000 copies of the software are reputed to have been sold by Perez-Melara and investigations are continuing.

© Pinsent Masons 2000 - 2005 (http://www.out-law.com/page-292)

Related stories

Key clicks betray passwords, typed text (16 September 2005)
http://www.theregister.co.uk/2005/09/16/key_clicks_betray_passwords/
Phishers and security firms in malware 'arms race' (24 August 2005)
http://www.theregister.co.uk/2005/08/24/apwg_fraud_trends/
US tops poll of spyware purveyors (23 August 2005)
http://www.theregister.co.uk/2005/08/23/webroot_spyware_report/
ID theft automated using keylogger Trojan (9 August 2005)
http://www.theregister.co.uk/2005/08/09/key_log_scan/
Trojan downloader spam poses as admin email (8 July 2005)
http://www.theregister.co.uk/2005/07/08/trojan_downloader_spam/
Mission Impossible at the Sumitomo Bank (13 April 2005)
http://www.theregister.co.uk/2005/04/13/sumitomu_bank/