Spyware - the abuse of good technology

Long before internet was born, the computer security was threaten by malicious program called virus. There is no end for virus, and today, virus creation are getting even more complex. New variation of virus is created faster than before. Then, as the internet becomes a must for each computer users, comes another ally for virus, the threat that is known as spyware.

 

Unlike virus, spyware is a bit different - they are harder to be detected. Why ? Because for the outside, spyware seems to be good and safe. They could take form like free applications, cookie file and browser toolbar. Some spyware even modify system files, to avoid themselves from being detected by security software. Hence, people won't notice that they're being spied.

 

For certain cases, spyware technology is used for good purposes. However, lately, since most computers today are connected to the internet, cyber criminals uses these technology to spy anyone that connects online and make lots of money from them. These are some examples of good technology that turns bad.

 

Adware - The term adware comes from two words, that is ads and software. Adware is any program or software that displays ads. Not all type of adware are bad. For example, Eudora e-mail client is an adware. User will start using Eudora as a shareware program. If user doesn't pay for full version after certain period, Eudora will display ads, to support the development cost for this program. This program itself doesn't spy user's computing activity and most importantly, the ads is displayed only when Eudora is running. Hence, for this case, adware is ads supporting program, which is suppose to be good.

 

However, most people confuse and misunderstand. The terms adware means a bad spyware program for most people. The reason for this is because lots of adware programs creates ads, even if the program is not running. It will also track user's activity, and send to the third party, for advertising purposes.

 

Keylogger - Keystroke logging is another technology that track user's keystroke. Keylogger is available in software, hardware and kernel drives.

An example of hardware keylogger. This USB keylogger is sold to the public for good purposes.

An example of a hardware keylogger attached to a keyboard.

Keylogger can detect everything: keystrokes, misused of computer, website URl, passwords, username, credit card numbers, secret codes.

 

Don't misunderstand. This is actually useful for many purposes including for security purposes. For example, top executives who hold confidential files on their office PC, can use the keylogger to detect unauthorized entry, tampering, or use of their PC. Parents can use keylogger to monitor child's computing activity. They can track which websites they went, chat rooms and e-mails. This will avoid them from going to porn websites, or communicating with bad guys in the internet. Employers can monitor their workers computing activity, so that they won't misuse the office facility. When a worker sees hardware keylogger installed, they'll use the computer only for job purposes. This will increase productivity. In order to solve a crime, FBI uses it to obtain passwords and break criminals security codes.

 

However, since this tool is publicly available, cyber criminals abuse this technology and use keylogger to spy and break user's passwords, get their credit card numbers, login to their e-mail accounts. The next thing happen is identity theft and victim's money is probably the target.

 

Tracking cookies - When user's visited a website, a small file created by that web server and send to the browser. The small file contains visitor's profile, created to track and maintain specific information about user. That file is called cookie.

Actually, cookies has lots of benefits. Most forums or social networking sites install cookies. The next time a member visited the same forum, social networking, groups - any related sites, that cookie will automatically recognize the same user and automatically login. When a user shops online, cookies are used to memorized items entered in the shopping cart.

 

Since this file is just a small piece of text, it is means no danger at all to your computer. It is not a script, unlike viruses or Trojans and it can operate by itself. However, since it can track user's activity cookie had been a privacy concern. Then, some cookie can be stolen by the third party. Cookies can also be modified by attacker.

 

Bad/phishing websites - In general, websites is a good technology. It allows user's to find information, communicates, and perform bank transaction. Phishing websites on the other hand, are created for identity theft. Often, phisher uses the name of high reputation company, such as eBay or Paypal to trick users. They would send an e-mail and when a person click on the link, he will be directed to phishing sites, instead of real Paypal website.

 

Rogue / Bad antispyware - It is obvious - an antispyware program suppose to be good. The function is to detect and remove all spyware. There are lots of antispyware company around that honest and willing to help people in removing the spyware. Then, as the spyware threat grows, and the demand for antispyware program increase, new companies are established and new type of antispyware products are created.

 

However, some new companies aims for more profit, than to help users. They create ransomware. It is trial version of their antispyware. When people download and install that product, the antispyware program itself install Trojan Horse in victim's computer. To remove the trojan, victim's are forced to purchase for the license. What's worse, is the license could be more expensive than most antispyware program around. Antispyware programs cost around $0 (free product) - $29.90. However, the price for SpyLocked is $39.90.

 

Indeed, the advance in computer and technology today has good and bad effect. Technology itself is neither bad nor evil. It is just like a weapon. In good hands, it will be used to improve quality, solve problems, help people and make life easier. However, when goes to criminals, they would probably use it to compromise privacy, steal identity, rob money and create problems to internet users worldwide.