Fake Firefox site bundles undead adware (Zango, Hotbar)

Custom Search

Hack in The Box
Free PC Security
TechAirlines
Freeware
OnlineSchutz
NewsApp Portal
Electronic Parts
Laser Printer
Search Engine Optimisation
Chicago Attorney's
Electricity Prices
Texas Electricity
Electricity Rates in Texas
Electric Companies in Texas
iPod Touch Games
Sharepoint Consultants

[Welcome to SCforum.info - Security [CENTRAL] Forum]

Welcome to SCforum.info - Security [CENTRAL] Forum, a home of the SCF Community devoted to provide Computer related News, Alerts, Downloads and FREE Help in such a way that even the novice computer user can understand.

Getting started using our community is extremely easy, check the two steps below:

Step 1: Create an account by clicking here. It's completely free with no hidden strings attached.

Step 2: If you have a computer problem and need some help, or just want to take part in opened discussions, simply visit scForum. Once you *Register an account, you can quickly post your questions and comments.

(*Registered Members get: free support, also, they can communicate privately with other members via PM, removal of this message, see fewer ads and much more...)

[Samker]

Adware slingers have taken advantage of the buzz around the latest version of Firefox to establish a fake browser download site.

The counterfeit Firefox download site is disguised as a kosher browser download site and might easily fool the unwary. A closer look, however, reveals the version of Firefox on offer is version 3.5 (instead of the latest 3.6 version supplied by Mozilla). In addition, terms such as "Anti-Pishing" (sic) are misspelled on the glossy counterfeit download site.

Web users taken in by the scam will wind up downloading browser software contaminated with the Hotbar toolbar from Pinball Corp, formerly Zango. The software bombards marks with irksome pop-up ads while also further slowing performance by loading the Hotbar weather application in the system tray.

Security firm eSoft, which documents the risk here: http://threatcenter.blogspot.com/2010/02/fake-firefox-update-pages-push-adware.html , reckons that the ruse is more likely the brainchild of a rogue Pinball agent rather than the firm itself. Pinball rewards its pay-per-install affiliate with up to $1.45 per install, eSoft adds.

Users looking to get the latest version of Firefox are advised to go to Mozilla's official site: http://www.getfirefox.com
Eset has blocked access to the fake site for users of its technology. Other vendors can be expected to follow suit.

Zango was repeatedly obliged to defend itself against accusations that its ad-serving software was distributed without the informed consent of users. Security firms routinely categorised Zango's software as adware, sparking unsuccessful lawsuits against Kaspersky Lab and PC Tools in 2007. Its PR staff tenaciously held the line that any problems were down to rogue affiliates, which it was in the process of culling even before it paid the FTC to settle a privacy lawsuit back in 2006.

However its chief tormentors - Ben Edelman, an assistant professor at the Harvard Business School, and Chris Boyd, former security researcher at Facetime Security - continued to document evidence of malpractice by Zango years after the FTC settlement. Zango went titsup last April, but its Hotbar technology lingers on the interwebs, as evidenced by the fake Firefox download ruse.

(Register)