Presenters Name

1
Spyware Think Before You Click
Presenters Name Date
2
Agenda

• Spyware
• Spyware defined
• The scope of the spyware problem
• What does spyware do?
• How spyware spreads
• Tips for avoiding spyware infections
• Is my computer infected?

WatchGuard Confidential Information
3
Spyware Defined
4
Spyware DefinedSpyware is sneaky software

• Placed on your computer without your knowledge or
  informed consent
  
• Tracks you in some way, and reports back to
  someone

5
Spyware DefinedSpyware is sneaky software

• Placed on your computer without your knowledge or
  informed consent
  
• Tracks you in some way, and reports back to
  someone
  
• Those are basic attributes of all spyware, but
  there are many variations
  
• Adware, malware, freeware, slimeware, lureware
• Web bugs, Web beacons, Web trackers, browser
  hijackers, keystroke loggers
  
• Toolbars, pop-ups, pop-unders, forced search
  engines, and much more
  

6
The Scope of the Spyware Problem
7
The scope of the spyware problemSpyware is one
of the great scourges of the Internet

• NCSA study 80 of users scanned had spyware
  installed
  
• U.S. home computer users average 30 pieces of
  spyware per PC
  
• 20 25 of Help Desk calls are caused by spyware
  
  
• Half of all Windows crashes are caused by
  spyware
  

8
The scope of the spyware problemBeyond
statisticsspyware can harm you personally

• Oregon employee betrays thousands of Social
  Security numbers
  
• Mom pays 859 in 90 days to keep her PC clean

9
The scope of the spyware problemThe economics of
spyware Zango

• FTC lawsuit of Zango states
• Zango software watches where you Web surf, then
  displays ads related to your apparent interests
  
• Since 2002, Zango software was downloaded over 70
  million times
  
• Zango paid third-party distributors for each
  installation of software
  
• Zango spyware was buried in lureware
• Zango was fined USD 3 million for deceptive
  practices
  
• Has Zango stopped? Its debatable

10
The scope of the spyware problemThe economics of
spyware Everybodys doing it!

• Lots of players, up to and including giant
  multi-nationals
  
• Spyware market estimated at USD 2 billion
  annually
  
• Placement of adware nets the distributor 3.00
  per PC
  
• Most security analysts believe organized crime is
  heavily involved
  

11
What Does Spyware Do?
12
What does spyware do?Spyware uses many means to
its end

• Tracks your Web surfing habits
• Changes your browser home page
• Captures cookie information
• Places adware on your computer
• Captures every keystroke you type
• Takes a photo of every Web site you visit
• Dials pay-per-minute phone numbers
• Limits your search results to subsidized
  outcomes
  

13
What does spyware do?Spyware damages productivity

• Slows the performance of your computer
• Makes your computer unstable
• Costs our company in cleanup and repair
• Can give away sensitive company data
• Is just freakin annoying!

14
How Spyware Spreads
15
How Spyware SpreadsSpyware villains have an
accomplice us!

• Video Spyware Think Before You Click
• Dodging spyware requires vigilance

16
How Spyware SpreadsSpyware often uses these
attack vectors

• World Wide Web URLs
• Peer-to-Peer (P2P) file sharing
• Free software downloads
• Desktop screensavers
• CoolWebSearch, 1080SearchAssistant
• Video compression/decompression (codecs)
• Cool toolbars
• Anti-spyware

17
How Spyware SpreadsMore spyware attack vectors

• Instant Messaging (IM)
• Social networking sites
• Email (usually with social engineering element)
• A note from your network administrator
• Your account is about to close
• Personal note sent to you by mistake
• Inexpensive pharmaceutical supplies
• Hot stock tips

18
Tips for Avoiding Spyware Infection
19
Tips for Avoiding Spyware InfectionsIf you dont
click itthey wont come

• Limit Web surfing to business sites
• Dont open unexpected email attachments
• Begrudge Internet downloads
• Suspect all free software
• Avoid special utility downloads

20
Tips for Avoiding Spyware InfectionsTwo nevers
and one always

• Never use company computers to visit peer-to-peer
  file sharing sites
  
• Never use company computers for unauthorized
  Instant Messaging
  
• Always leave anti-spyware and anti-virus software
  enabled.
  
• Think before you click.

21
Telltale Symptoms of a Spyware Infection
22
Telltale Symptoms of a Spyware InfectionHey,
who changed that?

• Desktop wallpaper
• Browser home page
• Browser toolbar
• Browser favorites
• Default search engine
• Screen saver
• System tray
• Start menu

23
Telltale Symptoms of a Spyware InfectionSometimes
the worst symptom is no symptom

• Sudden drop in performance
• Frequent locks, hangs, crashes
• Programs you dont recognize in Add or Remove
  Programs
  
• General freakish behavior

24
Recap of Key Concepts

• Spyware
• is software put on your computer w/out your
  knowledge or consent
  
• violates your privacy
• destabilizes your computer
• is expensive to get rid of
• Key defenses
• If you dont click it, they wont come
• Be suspicious of the unexpected and the free
• Pay attention to whats going on
• Think before you click.

WatchGuard Confidential Information
25
Questions / Comments
26
Thank You!