washingtonpost.com  > Technology > Tech Policy > Cybercrime

Quick Quotes

FTC Files First Federal Lawsuit Against Spyware

Scam Sells Software to Fix Problems It Began

By David McGuire
Special to The Washington Post
Wednesday, October 13, 2004; Page E01

Federal authorities have asked a U.S. District Court judge to shut down an operation that they said installed intrusive spyware on people's computers and then sold the victims anti-spyware software, a top consumer protection official said today.

The complaint, filed by the Federal Trade Commission last week in the U.S. District Court in New Hampshire, accuses the defendants of fraud and asks a judge to shutter the organization and force the people behind it to compensate their victims. It is the first federal lawsuit filed against the purveyors of spyware, a rapidly growing nuisance on the Internet.

The Federal Trade Commission's Lydia Parnes called the scam "online chutzpah." (Manuel Balce Ceneta -- AP)

_____Cyber-Crime Headlines_____
Companies Forced to Fight Phishing (washingtonpost.com, Nov 19, 2004)
Phishing Feeds Internet Black Markets (washingtonpost.com, Nov 18, 2004)
'Phishing' on the Rise, But Don't Take the Bait (The Washington Post, Nov 9, 2004)
More Cyber-Crime Headlines
___Tech Policy/Security E-letter___
Written by washingtonpost.com's tech policy team, the e-mail version of this weekly feature includes an original news article and links to policy and cyber-security stories from the previous week.
Click Here for Free Sign-up
Read E-letter Archive

_____Interactive Primer_____
Understanding Regulatory Policy
_____Related SEC Articles_____
SEC to Review Trading Rules (The Washington Post, Dec 1, 2004)
SEC Delays Reviews for Some Firms (The Washington Post, Dec 1, 2004)
Best price (The Washington Post, Nov 28, 2004)
More SEC News
_____About the SEC_____
Key Issues
Who's in Charge?
__  Regulatory News By Agency __

"The defendants were selling software to fix the problem they just caused. I've decided this is my definition of online chutzpah," said Lydia B. Parnes, acting director of the FTC's Bureau of Consumer Protection, at a press conference yesterday.

Parnes said the case was filed against two companies, Seismic Entertainment Productions Inc. and SmartBot.Net, as well as Sanford A. Wallace, who in the late 1990s was known as the infamous "spam king."

Spyware stealthily installs itself on computers, often when users download other free software online. The more benign types of spyware, sometimes called adware, generate flurries of pop-up ads on computer monitors. More malicious types record everything users type into their computers, including passwords and other sensitive data.

Lawmakers and regulators have stepped up anti-spyware efforts during the past year. The FTC held a meeting in April on the problem, and the House of Representatives earlier this month passed two bills that would expose distributors of spyware to multimillion-dollar civil penalties and send them to jail for up to five years.

Parnes said the FTC already has complaints against other spyware scammers in the works. "Note to the purveyors of spyware: This may be our first case, but it won't be our last," she said.

The companies used several tricks to direct victims to their Web sites, which were designed to automatically install spyware on visitors' computers, the FTC complaint said. The sites exploited a feature of Microsoft's Internet Explorer to install the software so victims never knew that it was being downloaded.

Once installed, the spyware often would open the computer's CD-ROM tray and display a message on the monitor that read: "FINAL WARNING!! If your cd-rom drive(s) is open you DESPERATELY NEED to rid your system of spyware pop-ups IMMEDIATELY!" Consumers who responded to the message were prompted to buy programs called Spy Wiper or Spy Deleter for about $30 each.

FTC spokeswoman Claudia Bourne Farrell said the FTC does not know how many copies were sold. The commission plans to ask that the eventual dollar amount be handed back to victims or to the U.S. government.

Philadelphia-based attorney Ralph Jacobs, who represents the defendants in the case, said many of the practices targeted by the FTC are legal. "Automatic uploading of software and altering default home pages are in widespread use by many companies on the Internet," Jacobs said. "SmartBot's goal is to find lawful ways to use these techniques for advertising and marketing."

Parnes said the scheme violates federal fraud laws. The measures pending in Congress, meanwhile, target common spyware practices such as resetting computer users' home pages and installing software without their consent.

Wallace, who pioneered the use of spam as a moneymaking tool under the name Cyber Promotions Inc. before publicly apologizing for it in April 1998, was not immediately available for comment.

Sen. Conrad Burns (R-Mont.), sponsor of one anti-spyware bill, applauded the FTC for filing the case. "Today's action from the FTC regarding spyware is music to my ears," Burns said. "Each time we knock one player down, it sends a signal to others out there and makes them think twice."

Ari Schwartz, associate director of the Center for Democracy and Technology in Washington, said the FTC and other law enforcers could play a big role in slowing the growth of spyware.

"Spyware is still a young industry, and it takes a lot of investment to build these really awful programs," Schwartz said. "People who are just getting into the industry may be deterred by the fact that the FTC is taking action."

David McGuire is a staff writer for washingtonpost.com.

© 2004 The Washington Post Company