Dodgy affiliates use malware to flog Symantec and Check Point
Malvertisement break
Agentless Backup is Not a Myth
Unscrupulous affiliates are using malware to advertise security software from legitimate firms. The practice is the brainchild of people who make a commission for every sale they generate - and not security vendors themselves. The practice raises serious concerns about the integrity and policing of affiliate programs from big names in security including Symantec and Check Point.
Instances of the dodgy practice, compiled by security firm Sunbelt Software, include PC Tools being "malvertised" last month in manipulated search results created on machines infected with the DNSChanger Trojan (video here). Separately, popups generated by the C2 (AKA Lop) adware package maliciously punted Symantec and Check Point products last week.
Sunbelt is seeking to throw a spotlight on dodgy practices by affiliates rather than make marketing capital out of the development. "Affiliate programs are a great way to spread the word on your product, but they need to be monitored carefully for abuse," notes Alex Eckelberry, president and chief exec of Sunbelt.
The US-based anti-spyware firm is not the only security watcher to pick up on instances of malvertisement. Independent security researcher Ben Edelman, an assistant professor at the Harvard Business School, has spotted examples of popups for Symantec's online store generated by the SurfSideKick adware package that's described as potentially unwanted by Symantec and other security vendors. ®
COMMENTS
DNS changer?
So correct my if Im wrong but what stops them from redirecting trafic to a malicious site with mpack installed?
Less dangerous, but still annoying...
... is the increasing amount of spam that seems to be coming from self-appointed "affiliates" of UK operations that would have to abide by DPA requirements if they were e-mailing on their own behalf.
Time for companies to take responsibility for the actions of their paid agents.
IT infrastructure monitoring strategies
Requirements Checklist for Choosing a Cloud Backup and Recovery Service Provider
Data control in the cloud
Cloud based data management
Agentless Backup is Not a Myth
