CoolWebSearch found in massive spyware ring

From: Paul Laudanski (zx_at_castlecops.com)
Date: 08/10/05

  • Next message: Mandriva Security Team: "MDKSA-2005:132 - Updated heartbeat packages fix temporary file vulnerabilities"
    Date: Wed, 10 Aug 2005 01:27:20 -0400 (EDT)
    To: bugtraq@securityfocus.com
    
    

    Sunbelt Software recently reported to the FBI evidence that shows
    CoolWebSearch is in a massive spyware ring where private information such
    as user names, passwords, chat sessions, bank information are stored and
    uploaded to servers. The FBI responded and are working on the case.

    "Note that there is a LOT of bank information in here, including one
    company bank account with over US$350,000 and another small company in
    California with over $11,000 readily accessible. This list goes on and on
    and on. Of course, there's also eBay accounts and much more." --Sunbelt

    This is obviously _big_ news. Here are some links with far greater
    detail. For all those out in the trenches:

    http://castlecops.com/article-6172-nested-0-0.html
    http://sunbeltblog.blogspot.com/
    http://www2.spywareinfo.com/2005/08/08/569
    http://en.wikipedia.org/wiki/Coolwebsearch

    Lets finally put an end to CWS.

    Kudos out to Patrick Jordan, aka Webhelper.

    -- 
    Paul Laudanski, Microsoft MVP Windows-Security
    CastleCops(SM), http://castlecops.com
    ________ Information from Computer Cops, L.L.C. ________
    This message was checked by NOD32 Antivirus System for Linux Mail Server.
      part000.txt - is OK
    http://castlecops.com
    

  • Next message: Mandriva Security Team: "MDKSA-2005:132 - Updated heartbeat packages fix temporary file vulnerabilities"