Microsoft gave an award to a vendor whose software is labeled as a threat by Microsoft's own security scanner, security pros say.
A developer who was recently awarded Microsoft's MVP status distributes adware with the software he creates, security professionals said Friday. Microsoft's own malwarescanner pegs the MVP's software as a threat.
Cyril Paciullo, the creator of Messenger Plus -- an add-on to Microsoft's Windows Messenger/Windows Live IM client -- announced in a blog entry Thursday that he'd been given an MVP Award (Most Valuable Professional). Microsoft's MVP program honors developers and others who Microsoft believes made significant contributions to users in the past year.
But according to Chris Boyd, the director of malware research at FaceTime Communications, and Alex Eckelberry, chief executive of Sunbelt Software, Paciullo's Messenger Plus also installs LOP, an adware program that changes IE and Firefox settings, and produce pop-ups on users' desktops.
Fellow-MVP Boyd took exception to Microsoft crowning an adware distributor. "Microsoft is rewarding someone that has an active involvement with one of the most maligned names in PC hijacking. If that isn't booberific, I don't know what is," Boyd wrote on his blog. He hasn't decided whether to ask Microsoft to take him off the MVP list. "As for my own MVP status, my first knee jerk reaction is telling me to tell [Microsoft] to shove it. My second knee jerk reaction [to] jumping ship is [that would] basically give the boobs of the world a green-light to hijack the program."
Nor did Eckelberry pull punches. After noticing that Messenger Plus' installation process dropped several new icons on the desktop, including one labeled "My Antivirus Update," he said "What a misleading icon, because this crap is what you actually get: A fake McAfee-looking page doing the age-old scam of 'click here to test your CD-ROM Drive'."
Paciullo did not reply to an e-mailed request for comment.
How Enterprises Are Attacking the IT Security EnterpriseTo learn more about what organizations are doing to tackle attacks and threats we surveyed a group of 300 IT and infosec professionals to find out what their biggest IT security challenges are and what they're doing to defend against today's threats. Download the report to see what they're saying.
Infographic: The State of DevOps in 2017Is DevOps helping organizations reduce costs and time-to-market for software releases? What's getting in the way of DevOps adoption? Find out in this InformationWeek and Interop ITX infographic on the state of DevOps in 2017.
IT Strategies to Conquer the CloudChances are your organization is adopting cloud computing in one way or another -- or in multiple ways. Understanding the skills you need and how cloud affects IT operations and networking will help you adapt.