Types
of Adware: Zango
It seems as if no place
on the internet is safe from adware, even popular social networking sites. Secret Crush, a web-based application more
commonly termed as a widget, was found said to be in violation of Facebook's
terms of service because of its adware characteristics. This deceptive widget captured people's
attention by displaying this message, "One of your friends has a crush on you!",
tempting them to click on the pop-up window.
Intrigued by the thought of developing a new internet friendship, users
were tricked into completing several steps only to find a free horoscope
service waiting for download. Those
users curious enough to proceed were eventually infected with Zango, an
infamous adware program. This program
was said to function as spyware, monitoring their web browsing habits in order
to launch targeted advertisements. In
the end, nearly 4% of all Facebook users had installed the software, amounting
to well over 1 million downloads.
Zango, formerly
associated with names such as Hotbar and 180solutions, is one of the leading
distributors of adware. The company
develops software that provides users with business resources and games, along
with DRM (Digital Rights Management)- restricted music and videos. Zango has also been at the center of recent
controversy. Last November, the company
settled charges with the FTC for $1 million.
The Federal Trade Commission stated that Zango used a number of
deceptive methods to install adware programs while obstructing users from
removing it, making their operating a violation of federal law.
Undesirable
Characteristics
Many security experts
have listed a number of undesirable activity associated with the Zango Easy
Messenger, the company's instant messaging utility. It reported to behave as a spyware
application by reporting user behavior, automatically functioning during
startup, displaying pop-up ads and installing other adware components.
In 2006, Websense Inc., a
prominent anti-spyware vendor, issued a Zango-related security advisory. The report stated that several user pages on
the MySpace website were compromised with adware. Apparently, the Zango Cash Toolbar was
secretly bundled with video stills that appeared to be from YouTube. After clicking on the still, users were
directed to a copy of the video, which was normally operated by rogue sites
hosting spyware.
McAfee warns that while
several Zango programs may have legitimate purposes, they should still be used
with caution. The software vendor
classifies Zango software as PUPs (potentially unwanted programs) that may
function as an adware downloader.
A Word of Warning
Considering the
increasing amount of infections on the internet, the detection of malicious
applications on Facebook and Myspace should come as no surprise. As these social networks ascend to greater
levels of popularity and attract more users, they are sure to attract more
adware and spyware as well. Although
Facebook no longer does business with Zango, the threat of infection remains
with new threats such as My Admirer, an exploit similar to Secret Crush. This recent wave of infection goes to show
that having a false sense of security on what appears to be an innocent website
can be very costly in the end.
