The spy threat from the internet

[emad]

The Independent

Browsing the web can let unwanted visitors into your system - and simple anti-virus software can't catch them. Michael Pollitt tracks a silent enemy
22 September 2004


Picked up anything nasty from browsing lately? While viruses, internet worms and hackers may be stopped by anti-virus software and firewalls, the latest spyware arrives through Microsoft's Internet Explorer. And unless it starts popping up adverts or installing unwanted toolbars, you're not going to know it's there. "Spyware is now probably the largest mass fraud area the world has ever seen," says Nick Ray, chief executive officer for the intrusion protection specialists Prevx Ltd. "Once they've got hold of your PC, they can do virtually anything."

Although installing free software commonly introduces spyware, an increasing proportion sneaks in unnoticed. "Attackers are looking at new infection methods that bypass anti-virus and firewalls. They can download and execute code on your machine as part of the process of web browsing," says Ray. Called a "drive-by download", it relies on invisible code in web pages. You don't even need to click.

Barb Rose, the director of communications for the spyware protection company PestPatrol, is in a better position than most to avoid this. The company has a vast spyware information database: it knows what's out there and how to remove it. Where spyware doesn't silently self-install, users will be duped into giving consent. Be warned: spyware will take over, throwing up adverts, diverting your web searches and monitoring where you go on the web.

"Spyware also spreads through the use of downloaders; programs which, once installed, begin to secretly download and install other programs on a user's machine. If a single downloader gets onto a computer, it will soon be running dozens of spyware programs, with no further action required on the part of the user," says Rose.
More:
http://news.independent.co.uk/world/science_technology/story.jsp?story=564267