Continued from page 1
In a recent, carefully controlled and closed demonstration, it took me less than 20 minutes to create a spyware program and embed it into a webpage. Using colleagues who had previously been made aware of
nature of
experiment, I invited them to take a look at this “special” but very ordinary looking webpage. Within seconds of visiting this webpage,
spyware went to work taking a snapshot of their hard disk, a snapshot of their Favourites folder and a copy of their browsing history. Before they had even finished reading
webpage,
spyware was already transferring their information to my server. It’s as easy as that! Equally that same code could be manipulated to perform a total trash of
hard disk or some other equally miserable and criminal act.
Speaking to
BBC, David Moll explained.
"Some (spyware programs) lurk on misspelled URLs and strike those that type faster than their fingers can carry them. As a result you do not end up where you expect to be."
Alarmingly, users do not even need to visit a website to contract spyware. The preview window in Microsoft’s Outlook Express allows emails containing HTML and any other code which can be placed on a normal webpage, to be loaded, without warning. Companies looking to implant spyware using
“drive-by” principal are regularly exploiting this glaringly obvious flaw in
design of Outlook Express.
"If you get one piece of spyware, you will get five because
business model says they pay each other to pass on information about victims," said Mr Moll.
Thankfully anti-spyware/adware programs such as Ad-Aware (free) and WebRoot’s own offering, Spy Sweeper can clean up a PC and even help prevent further infections, but just like anti-virus software, anti-spyware software needs to be kept up-to-date to remain effective.
In addition to providing software solutions to this problem, legislators too are seeking to end this electronic intrusion. In
USA an anti-spyware bill is moving towards approval in Congress. If successfully implemented, this bill will force firms who wish to use spyware to first receive permission from
end-user before it is installed. But even before any new laws come into place, spyware makers are already working on next generation coding which keep their programs intact and operational….perhaps even on your PC.
Related Links: WebRoot Spyware Audit http://www.webroot.com/services/spyaudit_03.htm Ad-Aware http://www.lavasoftusa.com/software/adaware/ WebRoot http://www.webroot.com/

Robert Palmer is CEO of deskNET Communications www.desknet.co.uk the first affordable alternative to opt-in email marketing and newsletters. With over 20 years professional experience in software development, Robert is a leading architect in the development of the emerging Net technology, One-2-Many Broadcasting software.