Breakfast%20Bytes:%20Scrambled%20Eggs

1
Breakfast Bytes Scrambled Eggs

• Spyware, Pop-ups, and other Annoyances

2
Janes Diary - Monday

• I just got my new PC. Its lightening fast. The
  first thing I did was get a cool screen
  saver. I surfed the net and found some really
  awesome screen savers for FREE! I pressed OK
  to this End User License agreement (EULA) and it
  installed so easily.
• What really happened? The screen saver software
  really installed adware. This will create
  pop-ups trying to sell her or promote new sites.

3
Janes Diary - Tuesday

• I surfed the net. I had a few pop-ups. One of
  them offered these really great emoticons and
  cool smileys for email. Once again it was easy.
  I was presented with a lengthy EULA to long to
  read so I just clicked OK. I am so excited to
  send emails to my friends with these smileys.
• What really happened? That long EULA mentioned
  that by installing the smileys she was also
  installing some software that would continue to
  pop-up ads and track her spending.

4
Janes Diary - Wednesday

• I was checking out my favorite sites and an ad
  popped up about an important security upgrade. I
  thought, I better do that. You cant be safe
  enough these days.
• What really happened? Jane just installed a
  keylogger. Keylogger spyware can capture user
  names, passwords, and PIN information from her
  machine or online forms, and then use this
  information later online. Security checks and
  updates should come only from Creighton tools or
  safe and trusted sites.

5
Janes Diary Thursday

• I found an on-line service that will kick-back
  some of the money I spend to my favorite charity.
  This really helps to raise funds and it is so
  easy. It seems that my machine is running slower,
  but thats ok. Im raising money for charity.
• What really happened? Janes PC is now tracking
  her activity and spending habits. The behavior
  driven software re-directs her to sites that are
  similar to her past actions. Data is also sold
  to other marketers.

6
Janes Diary - Friday

• A friend told me how I can get all the music I
  want for free through a P2P (Peer to Peer)
  application. I seem to get pop-ups more
  frequently and the computer seems slower but
  maybe this new software doesnt work as fast as
  others.
• What really happened? Jane just downloaded a
  nasty Trojan horse through this music file share.
  She completes her academic research project which
  the hacker grabs and posts on a website, along
  with Janes credit card numbers which will be
  brokered.

7
Janes Diary Monday

• My PC is so slow! Ive only had it for one week.
  Pop-ups plague my internet research. I tried to
  use Google to see if I could resolve my PC
  problems. My PC kept redirecting me some-where
  else. I cant get anything done. I am so
  frustrated. I called the Service Desk and they
  are sending someone.

8
Service Visit

• The Service Technician inspects the situation and
  shares the news
• Your computer is infested with Adware and Spyware
• While working on the problems Dick explains the
  situation to Jane.

9
Dicks Advice - Adware

• More and more users are being lured in with free
  offers.
• Nothing is truly free and these lures come with
  hidden costs.
• The user subsidizes the cost by receiving pop-up
  advertisements while they surf.
• This doesn't make it "spyware" as some might
  label it, but it is annoying adware.

10
Dicks Advice - EULA

• Most of these companies state their practices in
  their EULA, but most user's don't take the time
  to read.
• When you dont read the EULA, you may be agreeing
  to really NASTY terms.
• Ultimately users must decide if a free service,
  software or offer is worth being bombarded with
  pop-up ads every time they surf the Internet or
  having their name sold to other marketing firms.

11
Dicks Advice - Spyware

• Spyware is any program designed to collect
  information about you and your web practices.
• Many people are unaware that their computers are
  infected with Spyware agents.
• Spyware changes your machine settings and files
  and does not care.
• Malware is like spyware but it has malicious
  intent.

12
Spyware Added Via Other Programs

• Take a look at Kazaas Web Site
• Review Groksters Download
• Check out the EULA for AST/CPR

13
Watch What You Click

• Clicking on pop-ups is an open invitation. You
  have not won anything, no matter how much it
  flashes. Also avoid punching the monkey, taking
  quizzes in pop-ups and any banner that doesn't
  tell you who posted it.

14
Spyware Installation Methods

• Opening spam email (even by viewing it!).
• Visiting a website.
• Clicking a pop-up window.
• Download "free" utilities, games, toolbars, media
  players, etc.
• Using a file-sharing service (e.g., Kazaa,
  BearShare, Grokster).

15
Dicks Advice - Symptoms of Spyware

• Home and search page eviction.
• Snail syndrome (slowdown).
• Fishy or excessive pop-ups.
• E-mail errata.
• Newand unexpectedfavorites.
• Stroke-by-stroke surveillance (behavior tracking).

16
Growing Problem

• Lack of regulation.
• More-complex Internet security issues.
• Lack of user awareness.
• Greatest threat to personal identity and
  University productivity.
• Yet, it is easily preventable.

17
Dicks Advice Prevention Tips

• Pop Up and Banner Ad Blockers only mask symptoms.
• Additional warning -- these can cause trouble
  with some web-based applications (Banner).
• Always run antivirus software.
• Watch out for cookies.
• Do not open spam email.
• Do not run as an Administrator.

18
Dicks Advice Prevention Tips

• Read the end-user license agreement (EULA)
  carefully.
• Avoid peer-to-peer file sharing services.
• Firewalls help prevent hackers and other
  intruders.
• Protect yourself against drive-by downloads with
  strong Browser settings.

19
Technical Solutions

• At Home
• Ad-Aware SE Personal
• Spybot Search Destroy
• At Creighton
• Call the DoIT Service Desk x1111 or your own IT
  personnel

20
Questions ?

• For questions after this session, contact our
  Service Desk at 280-1111.