informa
/
2 min read
article

Adware Purveyor Claims Extortion By Own Distributor

The admission by 180solutions identified the American company that Dutch law enforcement officials said had been victimized by a trio of men arrested last month.
When 180solutions noticed that the Dutch distributor was claiming extraordinary numbers of installations, it shut him off from further payments, said Sundwall.

"He amassed a few thousand bucks, that's all," Sundwall said.

The Dutch case isn't the only one in the works, said Sundwall. Other investigations are underway, with more distributors or former distributors suspected of using botnets to spread 180solutions' software in violation of the company's contracts. "We're continuing to work with law enforcement, but the only thing I can say is that some of the cases are domestic." He wouldn't say when the investigations might be revealed, or how many bots were involved.

The use of botnets to spread adware is nothing new, said Richard Stiennon, the director of threat research for Boulder, Colo.-based anti-spyware vendor Webroot. "Botnets are great vehicles for distribution because you can install anything you want, whether it's adware or spyware or other malicious programs."

But the 180solutions scenario, where a distributor turned on its partner, is a new twist, said Stiennon, and shows how easy it is for distributors to circumvent agreements with adware suppliers.

It also demonstrates how companies like 180solutions could be doing more to prevent renegades like the Dutch operation. "180solutions has said it will shut off the money to these types by the end of the year," Stiennon said. "But why don't they shut them off immediately?"

180solutions' Sundwall listed a series of changes that the company has made to its distribution process since June, including after-the-fact notification that it's installed software, and a new rule that forbids third parties from using ActiveX controls to install software via Internet Explorer.

"And as of Jan. 1, 2006, people who don't use our 'Safe and Secure Search' will not be paid, period," Sundwall said. "There will be no money involved in illegally distributing our software." Safe and Secure Search (S3) is 180solutions' name for a technology to prevent the suppression of the notification and consent dialog boxes the company's designed for its Zango Search Assistant and 180search Assistant.

But companies like 180solutions may find it tough to make money as they change their business practices. "I think the days of most adware companies are numbered," said Stiennon. "As they try to go legit, they're just not going to be as profitable as they once were."