Subscribe to the Free Print Edition!
Celebrating 25 Years

GCN Home > 01/31/08 web stories

The world of spyware evolves

By William Jackson

The spyware community has polarized, a panel of security experts said Thursday at a Washington workshop hosted by the Anti-Spyware Coalition. Adware distributors, under pressure from the Federal Trade Commission and anti-spyware technology, have mostly quit the business or are going legit. But the really bad players are getting worse, producing more stealthy and sophisticated malware.

“Nuisance adware is mostly dead,” said FTC Commissioner Jonathan Leibowitz.

Venture capital funding of companies that are paid to deliver annoying pop-up ads to your Web browser is largely a thing of the past, Leibowitz said. He pointed to several successful civil actions against major distributors who have since gone out of business or gone straight.

And reports of spyware infections have gone down, said Jeffrey Fox, technology editor for Consumer Reports. According to annual surveys, infections have gone from one in four respondents in 2004 to one in 11 in 2007. In the same time, the estimated cost of spyware has dropped from $3.5 billion a year to $1.7 billion.

But, to quote Miracle Max in The Princess Bride, “there is a big difference between mostly dead and completely dead.”

While adware and spyware are less visible, Trojans delivering malware to computers are more stealthy, sophisticated, and harder to detect and remove.

“I’m here to tell you, there is some malware circulating on the Internet that is impossible for an automated program to remove,” said Janie Whitty, administrator of the Lavasoft Online Support forums who works with malware victims.

Susannah Fox, associate director of the Pew Internet and American Life Project, said there is a lot of misplaced trust among users of rapidly evolving technology.

“We are seeing a changing game,” with the growth of broadband and wireless connectivity and more powerful portable devices, she said. It is a faster, more mobile and more participatory environment, and “most Americans are jumping in without considering the implications.”

Despite the FTC’s legal success, Leibowitz said there is a limit to what civil enforcement can do. The line between what constitutes legal and illegal software and permissible and impermissible behavior by an application is not always clear, and he is reluctant for the FTC to go too far in defining it.

More news on related topics: IT Security, Software Applications



GCN Popup