|
Is Someone Spying On YOU?
Thieves have updated their techniques to include software
code called "spyware"; Legislators and software developers debate
whether new laws to curb online theft are necessary.
You are headed for bed. You have locked your doors and windows, set
your car alarm, and your wallet sits safely on your bureau. You covered
all the bases, right?
Wrong. Before shutting yourself down for the day, you shut down your
PC, too. But, while you were online balancing your checkbook, moving
money from one account to another, and even when you typed in your
credit card number to purchase your cousin a new Stephen King novel,
someone was watching.
Of course, you are well aware of thieves' typical working methods-house
burglary, nighttime car theft and pick pocketing. But they have made a
substantial leap in how they swindle, and their new tool is called
spyware. And just as criminals have stepped up their thieving ways, so
must PC users increase their PC security.
Profile of a Digital Spy
Spyware, as it sounds, makes it possible for thieves to steal
information from computers without users' knowledge. It downloads
itself onto a PC and remains hidden, capturing and distributing
information from a user's computer without his or her knowledge.
Spyware can monitor Internet browsing moves and record keystrokes as
users enter personal information or passwords. It also can send spam
from the victim's PC.
In the end, spyware developers are after your credit card numbers, bank
account information, identity and passwords to all one's vital
information-an Internet spy's Holy Grail.
Technology companies are fielding an increasing number calls from
customers complaining of problems that, once diagnosed, stem from
spyware. Lawmakers already have begun to make life harder for the
authors of this malicious software, but honest developers are wary. And
the future of spyware? The technology could prove helpful in some
professions, but online criminals promise to continue to make life more
difficult for law abiding folks.
Support Lines Overwhelmed
In the latter months of 2003, spyware (along with adware, its
annoying but less nefarious cousin) became the largest complaint by
Dell customers, Dell lawyer Maureen Cushman revealed at a one-day
conference held by the Federal Trade Commission in April (2004).
Customers call with myriad complaints - "slow performance, inability to
access the Internet, extra icons and pop-up ads" - all problems that
begin with unwanted software customers did not know they had on their
PCs.
Spyware and adware are now "a larger technical support problem
than viruses," McAfee Security Manager Bryson Gordon told conference
attendees.
Almost all known spyware is aimed at the Microsoft Windows
operating system, something of which Microsoft is aware. The software
giant said 2004 Windows updates will include several anti-spyware
features, including a mechanism to prevent unsolicited software
downloads.
Government Intervention
Though such powerful spyware is not new, the public and
lawmakers have only become alarmed in the past year. Will new
regulations help curb spyware? Some lawmakers, for example Rep. Mary
Bono, R-Calif., say yes.
This year (2004), Utah became the first state to take on spyware.
Utah's new law prohibits companies from installing software, without
permission, that sends users' personal information to another company,
transmits users' online actions or leads to pop-up ads. At the time of
this article, state lawmakers in Iowa and California were exploring
their own versions of anti-spyware legislation. Spyware-restricting
proposals are even floating around the U.S Congress.
But software firms are wary of government intervention. They believe
new laws could prevent the development of good, useful programs such as
smut-filtering applications and software update features, which can
automatically install software patches for Windows on a PC without user
participation.
However, new laws may not be necessary. At the FTC conference, a U.S.
Justice Department prosecutor said he already had the necessary tools
to bring spyware programmers to justice.
"In our quiver, we have a number of arrows we can use in prosecutions,"
said senior computer crime prosecutor Mark Eckenwiler.
Future of Spyware
The future of spyware is both good and bad, according to
Intellitrove Inc., a Hayward, Calif. hardware and software security
consulting firm.
The good: It may help parents monitor their children's Internet surfing
and assist private investigators and law enforcement agencies, although
gumshoes and police detectives will surely encounter delicate privacy
issues. Spyware also could improve how we conduct research projects in
the area of our computer and Internet usage.
The bad: Spyware may allow criminals to steal corporate trade or
national secrets. Software developers may create spyware-building kits,
which surely would increase the number of Internet spies. And down the
road, sophisticated spyware may be able to steal information from
phones, fax machines, copiers, microphones and Webcams.
The Next Step
Spyware began as software that Web advertisers used to record
the personal information of Web surfers to better reach consumers.
However, this so-called adware has quickly become the center of a
privacy debate.
Now, software developers have taken adware one step further, and
spyware threatens every Internet user. In no time at all, spyware has
angered many, including Congressman in Washington. That alone is hard
evidence that spyware is an ominous form of software.
Protection
McAfee recommends anti-spyware as one of the top four
security essentials, including:
- Anti-virus, for protection against viruses, mass-mailing worms, and
Trojan horses
- Personal firewall, to creates a barrier that blocks intruders from
entering your system to steal private files, financial information,
passwords or Social Security Numbers
- Anti-spam, to filter out junk, porn and scam e-mails, or other
unsolicited messages
- Privacy service, to set up controls to protect confidential
information from being exposed inadvertently by family members, and
block objectionable Website content and
- Anti-spyware, to protect against computer code being deposited onto
your system without your knowledge, tracking your activity to serve
advertisements, or logging keystrokes to steal passwords or your
identity.
"When you purchase a new computer, the first thing you need to do is
install the right security software," said Bryson Gordon, Senior
Manager, Product Management of McAfee. "To bypass this step is to put
your new system and its contents-including your personal and business
information, or identity-at constant high risk."
|