Three Indicted In Scareware Scam That Netted $100M 120
alphadogg writes "Three men are facing federal fraud charges for allegedly raking in more than $100 million while running an illegal 'scareware' business called Innovative Marketing that tricked victims into installing bogus software. The company's products generated so many consumer complaints that in 2008 the FTC brought a civil action against Innovative Marketing and call center partner Byte Hosting, effectively putting them out of business. On Wednesday, a grand jury in Chicago handed down criminal charges, meaning the three men now face jail time if convicted." One of the men indicted is in Ohio and the others are believed to be in Ukraine and Sweden. Microsoft's Digital Crimes Unit helped out with the case.
Finally. (Score:1)
These guys can kiss the baby.
LK
Re: (Score:1, Interesting)
Comment removed (Score:3, Interesting)
Re: (Score:2, Insightful)
Do you do online banking on these machines afterwards?
Re:Fake AVs (Score:4, Informative)
Re: (Score:1)
Re: (Score:2, Insightful)
why would they bother installing linux, since they have a friend who is skilled and willing enough to clean it up for them?
i've been down this road too many times. i have now been forced to never offer "clean up" support for friends and family. it makes me sad, but it's the only way they learn : (
Re: (Score:2)
Re: (Score:2)
The mistake you make is doing it for free.
Family owes me a favor. Friends and co-workers pay.
Would you honestly ask your buddy who's a landscaper to "do you a favor" and mow your lawn for free? How many landscapers would say yes?
Re: (Score:1)
Re: (Score:1)
Re: (Score:2)
Same issue I've seen with redirecting of web traffic it was crazy - I figured that it would only effect firefox and IE on the machine, but it even effected a new install of chrome. Browser looked fine until you googled microsoft, avg, trend micro, etc. Just plain nasty
Re: (Score:2)
Re: (Score:1)
Re: (Score:2)
Re: (Score:2)
i imagine i'll be back at that customer again very soon..lol his urge to spank the monkey of dodgy free porn sites is greater than his need for a clean running machine
Re: (Score:2, Interesting)
I had a run-in recently from a drive-by malware install (curse you Chrome!). It immediately disabled task manager and locked me out of regedit and msconfig, and icons began to fill my desktop as I gazed on in horror... I couldn't install MalwareBytes because the malware killed the installer process immediately. I couldn't even download anything with an ad-aware-like filename since the request was hijacked and I got a scareware page instead.
A reboot into safe mode failed. Luckily, I had Process Explorer [microsoft.com] on a
Re:Fake AVs (Score:4, Insightful)
I had the same thing and luckily I had Process Explorer installed..
I'd be quite happy if the verdict came down to just shoot them. Seriously. I'm tired of this crap constantly trying to infect my computer and the crap emails I get every day. I'm careful and have only been infected twice ever, and the spam filters take care of most of the email, but seriously - how much effort is spent creating and then creating prevention for this crap??
Once convicted, summarily shoot them.
Re: (Score:1)
Uh any convictions of particular criminals won't stop the flow, and shouldn't be depended on to stop the flow. In other words, there's no point in prosecuting them. The problem is a technical one not a legal one.
Re: (Score:2)
That's like saying there will always be murderers, so there's no point in trying to convict them. You should try and stop getting killed instead.
Re: (Score:2)
I have no idea what Process Explorer is, but considering the parent and grandparent post I'm sure as hell going to be looking into it.
Re: (Score:2)
Re: (Score:2)
PE is a beauty. The only thing it really misses is Task Manager's Up Time clock (Performance tab), which appears to be the only way in Windows to get the total system up time exclusive of standbys and hibernates. (Other methods, and I've tried many, just count time from boot. Let me know if I missed one.)
If that makes it to PE, I'd happily let even malware delete taskmgr.
Re:Fake AVs (Score:5, Informative)
Comment removed (Score:4, Informative)
Re: (Score:1)
Oh, right that happened too. I had to right-click Process Explorer and hit Run As... and run it as myself.
Re: (Score:2)
Let's face it, if somehow malicious code found a way to be executed as root on my linux system, there are no tools on earth short of going over the entire filesystem in a different OS with a text editor that can save you.
Just boot the rescue disk, that's what it's there for.
Of course, I wouldn't praise XP too strongly, since the same holes that let you kill the malware (you think) are what let the malware in in the first place.
Re: (Score:2)
Ah, the old "Robin Hood"/ "Friar Tuck" trick. That's so 1970s.
Re: (Score:1)
I got the main scareware off easily, but Malwarebytes, MSE, and a few other programs could not get rid of the underlying Aleuron.h root kit
end result, gave up , blew up the xp home and didn't reinstall, its now an ubuntu machine exclusively..
Re: (Score:1)
bartPE cd.. I can remove it in 10 minutes.
Then install and run a good anti malware scanner and walk away...
Upgrade your tool set, it's silly to fight with these things.
Re: (Score:3, Interesting)
Re: (Score:1)
Indeed, the new ones are bad. However, this has worked for me:
Take the drive out and put it into a fully-updated Windows box as a second drive, then run updated MS Security Essentials and updated MalwareBytes against it. It takes a while to run full scans, but it seems to work ("seems" being the operative word).
Re: (Score:1)
I googled around and the consensus was, "eh, just rebuild"
not saying its not possible, just not easy....
Re: (Score:1)
Not to say you're not right, but what would prevent MSE and/or MWB from removing it? We're scanning a non-boot drive from a clean machine with no malicious code running.
Re: (Score:3, Insightful)
Because I would absolutely trust an unstaller app provided with a malware "virus scanner". I think I'll cut out it's heart by my self, thank you very much.
Re: (Score:2)
Re: (Score:1, Informative)
One word.... "Combofix"
Seems to remove it everytime I use it.
Re: (Score:1)
Re: (Score:2)
Re: (Score:2)
Re: (Score:2)
Re: (Score:2)
http://download.cnet.com/Remove-Fake-Antivirus/3000-2239_4-10915342.html [cnet.com]
Re: (Score:2)
Not all of them are so easy, yes google is your friend, but many times the googled answer has been reinstall windows, which is easy I suppose except for having the person dig up all their software cds and licenses.
Re: (Score:2)
And is a good lesson to teach that user.
you chose to use Microsoft, you get to pay the piper......
My wifes Ubuntu box crashed when its hard drive failed... I recovered her user directory to another drive and reinstallation of all software was easy...
Same for my mac.. I can install a fresh OS and not haveto reinstall any of my apps.
Re: (Score:1)
On machines that I deal with regularly, I do a full install, update and patch, install all needed drivers, Turn off swap space, defrag, clear out all cache and temp files, then do a full ghost of the drive. Data such as music an pictures are kept on a separate partition/drive. The ghost usually takes about 10 minutes to restore.
Re: (Score:1)
Great news (Score:5, Funny)
Re: (Score:1, Troll)
It would be real news of "Microsoft's Digital Crimes Unit" took down -- Microsoft!!!
Re: (Score:2)
Well, we already heard they have a guy to take out IE6. I think WinME is already fairly dead, but if they could put a bounty on Vista's head too... WinXP and Win7 are actually nice products, Microsoft remind me a bit of Intel. They may hit their Itanics, but they keep coming back with a vengance.
Re: (Score:1, Insightful)
Whichever Microsoft group it is that puts together Security Essentials is working on that too.
Symantec and Norton (Score:5, Interesting)
You beat me to it. Symantec may have done some good stuff, but that was over twenty years ago. Same with Norton but, after they merged together, "scareware" seems the most appropriate name for what they have been doing.
I liked the "pink shirt" book, though, was of great use to me in the 1980s.
Re: (Score:1)
Re: (Score:2)
Now grandma gets a popup about how her xp antivirus needs her credit card information. She doesn't know the difference
Re: (Score:1)
Re: (Score:1)
Hopefully AntiMalWareBytes is a typo and not an additional source of your problems, the name of the popular malware removal tool is Malwarebytes' Anti-Malware.
Re: (Score:1)
Re: (Score:2)
Re: (Score:2)
Generally you need two. Malwarebytes is good for a newbie however and will catch almost anything, it's actually what I install on customer machines and then schedual an automated run for it. The other I'd suggest is Spybot S&D, besides having a nice host file it checks against known malware. I know some people like prevx, but I find it mediocre at the best.
Re: (Score:3, Interesting)
Re: (Score:2)
install a blocking hosts file and privoxy. It stops 99% of all that crap. dont leave it up to the browser adblocking... stop it before it can even get to the browser.
Re: (Score:1)
How do you do this?
Is it something you install locally, or on your router/firewall?
Re: (Score:2)
Download & setup Privoxy.
http://sourceforge.net/projects/ijbswa/files/ [sourceforge.net]
http://www.privoxy.org/user-manual/quickstart.html [privoxy.org]
Grab a decent HOSTS file & stick it in your %SystemRoot%\system32\drivers\etc\
Alternatively, you can install Spybot & let it's Immunize function generate a HOSTS file for you.
Re: (Score:2)
Format the machines and start again. I cannot understand why windows folks bother with this. If the install has been infected you can never trust it again, wipe and start over.
Equivalent to 38 murders (Score:3, Interesting)
According to the Department of Transportation, one human life is worth $2,600,000 [dot.gov], meaning that the damage of this scam was approximately equal to that of 38 deaths. To put this in perspective, the Manson family almost earned death penalties for only 27. I hope the judge takes this into account when deciding sentencing.
Re: (Score:2)
wow. loved reading that.
"This study presents a figure of $2.2 million (in 1988 dollars) as the recommended value to use in benefit-cost analyses as the willingness-to-pay to avert a fatality...The GDP implicit price deflator increased about 18 percent from its average value in 1988 through 1993. Therefore, the 1988 figure of $2.2 million dollars wasincreased 18 percent to yield a 1994 figure of $2.6 million dollars."
awesome.
Re: (Score:3, Funny)
The article you point to writes about 1994 Dollars. Based on the CPI (consumer price index), that would be equivalent of 3,179,729.73 today's dollars.
Dividing the 100M by this amount yields around 31.45 fatalities. Still better than the Manson family, I guess..
Re: (Score:1)
Why?
Because the price of a 20-ounce Coca Cola in 1994 was $0.59. Today it is $1.69. Which is a factor of about 2.865, because 0.59 * 2.865 = 1.69.
So $2,200,000 * 2.865 = $6,303,000.
Re: (Score:1)
Wonderful! Except nobody died... murder and fraud are two different things. I hope the judge takes this into account when deciding sentencing.
Re: (Score:2)
Damn govm't interference (Score:1, Flamebait)
If they would just wait for the free market to kick in, this would be solved once and for all!
Re: (Score:2)
Free Market already took care of the nice cinema in my town.
I'm sure Free Market also has a nice solution for scareware.
Re: (Score:2)
One of the guys is in Ukraine; civilian nukes can't travel that far :-(
Re: (Score:2, Interesting)
I agree. There's no such thing as 'digital crime': fraud is fraud, whether it's committed online or not.
This is why... (Score:4, Informative)
I tell everyone, both at work and the few who know I work in the IT field, that whenever you are asked if you to install something, the answer is always no. I don't care if it tells you your computer will explode and burn your house down, the answer is no. I don't care if it tells you that 1 million babies will be killed if you don't install the software. The answer is still no.
No, no, no, no, no!
Of course not making them admin helps in this regard, but malware can still find a way to install itself so the answer is always no when asked if you want to install "Ultimate Web Cleaner Deluxe Plus!".
Re: (Score:1)
"Ultimate Web Cleaner Deluxe Plus!"
Does it run on Debian? I'd really like to clean my webs. Can you give me a link? ;^)
Re: (Score:2)
Re: (Score:2)
Yes, but I predict the future "no" will also install it. There's nothing that says if you click "no" it won't install anyway. For most programs, if you click "no" you'd expect some kind of EXIT command. Us sane programmers have a GUI that works as we intend. There's no reason why malware/spyware won't have a "yes" and "no" button that does the same thing, right? If I wanted to force you to install a software program, I'd make sure that if you click no it still performs the yes function.
Re: (Score:2)
Finally (Score:1)
The law does something good for a change. Hope they get convicted.
Scareware claiming viruses on my Linux computer (Score:3, Interesting)
On each of those occasions, it offered to scan my hard drive for viruses and spyware. Despite trying to say no and/or close their web page the advertisement reappeared and pretended to start scanning my hard drive. It said that it was scanning my drive C, with a progress bar showing that a scan was supposedly in progress. That seemed bogus, because drive letters are not used in Linux for designating hard drives or partitons.
I had a firewall enabled in both my DSL router and on my computer, with all the incoming ports and most of outgoing ports closed. So, I doubted that it was actually quite that easy to effortlessly scan my hard drive, like that.
After about 60 seconds of scanning my hard drive, they announced that several several viruses and several types of spyware had been found on drive C and also in my registry. Linux does not have a drive C and also does not have a registry, so again that seemed bogus. They then recommended that I purchase their anti-virus product to solve the problem. Not having actually noticed that I was using a Linux instead of Windows, they did not offer me a Linux version.
On at least one of those encounters with scareware over the years, it even tried to download their antivirus program to my computer just after I again tried to close the tab (or possibly a pop-up). Firefox then asked me what program it should use to open a Windows executable file. It also gave me the alternative of choosing where to save the file, or canceling the download. Of course, I did not even consider trying to download the program and see if I could get it to run under WINE.
After the most recent scareware encounter, I immediately installed the NoScript and AdBlock plug-ins for Firefox. I did that on both my Linux computer and my Windows computer. I had finally had enough of scripts and advertisements. Now, when I encounter an occasional trusted web page which requires scripting enabled, I right-click on the icon in the lower right to either temporarily or permanently allow scripts for just that web page. I am not a computer expert, but my guess is that without scripting enabled, I would probably have less trouble closing the advertisement without it instantly reappearing again.
Re: (Score:2)
If you browse using Firefox with NoScript and AdBlock on Linux behind a two user-configured firewalls and are somewhat up-to-date on the state of Linux viruses, then yes, you are a computer expert.
-- 77IM
Re: (Score:2)
Yeah, I was thinking the same thing. I'm lucky if my friends even know what a firewall is & I've given up trying to get them to use NoScript. I just charge them to clean their PCs now.
Re: (Score:2)
Even so, I realize that my skills are way beyond what the average computer user has, so I hesitated in saying that I was not an expert.
I also noticed the URL where the scareware advertisement was coming from. Just as an experiment, I
Re: (Score:2)
Re: (Score:2)
That's the reason why most malware succeeds. It fools people into believing that it's something else. Human stupidity is a great thing, it leads to technological expansions, and it also leads to self-destructive behavior.
Re: (Score:2)
Re: (Score:2)
Re: (Score:2)
Some of those are actually fairly amusing to watch when you're running Linux. They do a fairly good job of making the browser window look like an XP desktop running a virus scanner (which of course, finds tons of viruses).
Almost worth it (Score:2)
$100 Million split 3 ways? Now you're talking values that make a few years of jail time worth it. That or take the money and run to another country.
Re: (Score:2)
Maybe if they blew it all on coke and hookers. If they bought real estate, boats, or other valuable assets, the government will probably seize them (at least in the case of the guy in the U.S. - the guys in the other country might get away with their share of the money).
Re: (Score:2)
Maybe if they blew it all on coke and hookers.
How much Coca-Cola and how many Hercules Hooks could 100 million USD buy?
I have succesfully used this defense (Score:1, Offtopic)
I have successfully used this defense. When I was six, we put doggy doodoo in Fatty Postlebridge's coat pockets. It was the other two, they maked me done it, waaagh, 's not fair!