<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: zango]]></title>
    <link>http://securityratty.com/tag/zango</link>
    <description></description>
    <pubDate>Fri, 16 May 2008 05:01:00 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[More MMORPG Fakeouts]]></title>
      <link>http://securityratty.com/article/b648d83d66372f23dbf0ea3ee7b7deee</link>
      <guid>http://securityratty.com/article/b648d83d66372f23dbf0ea3ee7b7deee</guid>
      <description><![CDATA[Here's a few more sites presumably created by the maker of the fake Batman Online game

Step up, Dragonball Z



Click to Enlarge

To &quot;download&quot; this Dragonball Z MMORPG, you have to fill out a...]]></description>
      <content:encoded><![CDATA[
        Here's a few more sites presumably created by the maker of the <a href="http://blog.spywareguide.com/2008/09/zango-and-the-batman-online-vi.html">fake Batman Online game</a>. <br /><br />Step up, Dragonball Z:<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><a href="http://blog.spywareguide.com/images/dbz1.html" onclick="window.open('http://blog.spywareguide.com/images/dbz1.html','popup','width=624,height=585,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0'); return false"><img src="http://blog.spywareguide.com/images/dbz1-thumb-324x303.gif" alt="dbz1.gif" class="mt-image-none" style="" height="303" width="324" /></a></span><br />Click to Enlarge<br /></div><br />To "download" this Dragonball Z MMORPG, you have to fill out a survey:<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><a href="http://blog.spywareguide.com/images/dbz2.html" onclick="window.open('http://blog.spywareguide.com/images/dbz2.html','popup','width=672,height=530,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0'); return false"><img src="http://blog.spywareguide.com/images/dbz2-thumb-372x293.gif" alt="dbz2.gif" class="mt-image-none" style="" height="293" width="372" /></a></span>
<br />Click to Enlarge<br /></div><br />Once done, you'll be amazed(!) to find you're taken to....shockingly....the <i>official</i> Dragonball Z MMORPG game.<br /><br />The only problem? The website is in Japanese and the game <a href="http://en.wikipedia.org/wiki/Dragon_Ball_Online">hasn't been released yet</a>.<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><a href="http://blog.spywareguide.com/images/dbz3.html" onclick="window.open('http://blog.spywareguide.com/images/dbz3.html','popup','width=815,height=592,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0'); return false"><img src="http://blog.spywareguide.com/images/dbz3-thumb-315x228.gif" alt="dbz3.gif" class="mt-image-none" style="" height="228" width="315" /></a></span><br />Click to Enlarge<br /></div><br />Forgive me for thinking this isn't the greatest deal I've ever been sold.<br /><br />Now it's Harry Potters turn:<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><a href="http://blog.spywareguide.com/images/hp1.html" onclick="window.open('http://blog.spywareguide.com/images/hp1.html','popup','width=565,height=580,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0'); return false"><img src="http://blog.spywareguide.com/images/hp1-thumb-365x374.jpg" alt="hp1.jpg" class="mt-image-none" style="" height="374" width="365" /></a></span><br />Click to Enlarge<br /></div><br />Like the Batman site, you need to install Zango. Do so, and.....you're taken to the popular <a href="http://www.hogwartslive.com/">Hogwarts Live</a>, which you could have easily found and played yourself without installing Adware. As you probably guessed, the screenshot from the title graphic on the site is <i>not</i> part of the game you'll eventually play.<br /><br />The sites involved are<br /><br />onlinedbzgame.info<br /><br />and<br /><br />harrypottergame.info<br /><br />in case you want to add them to your blocklists.<br />
        
    ]]></content:encoded>
      <pubDate>Thu, 04 Sep 2008 12:16:43 +0000</pubDate>
      <category domain="http://securityratty.com/tag/mmorpg">mmorpg</category>
      <category domain="http://securityratty.com/tag/mmorpg game">mmorpg game</category>
      <category domain="http://securityratty.com/tag/game">game</category>
      <category domain="http://securityratty.com/tag/official dragonball">official dragonball</category>
      <category domain="http://securityratty.com/tag/dragonball">dragonball</category>
      <category domain="http://securityratty.com/tag/enlarge">enlarge</category>
      <category domain="http://securityratty.com/tag/click">click</category>
      <category domain="http://securityratty.com/tag/popular hogwarts live">popular hogwarts live</category>
      <category domain="http://securityratty.com/tag/batman site">batman site</category>
      <source url="http://blog.spywareguide.com/2008/09/more-mmorpg-fakeouts.html">More MMORPG Fakeouts</source>
    </item>
    <item>
      <title><![CDATA[Zango And The Batman Online Videogame]]></title>
      <link>http://securityratty.com/article/df88ab063f04def43d02f931dfa23c42</link>
      <guid>http://securityratty.com/article/df88ab063f04def43d02f931dfa23c42</guid>
      <description><![CDATA[This is Newsarama, a site (mostly) geared around comics and other related media





Click to Enlarge

You'll notice Batman, over on the right there. Let's take a closer look





Free Online Batman...]]></description>
      <content:encoded><![CDATA[
        This is Newsarama, a site (mostly) geared around comics and other related media:<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><a href="http://blog.spywareguide.com/images/batzang1.html" onclick="window.open('http://blog.spywareguide.com/images/batzang1.html','popup','width=839,height=492,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0'); return false"><img src="http://blog.spywareguide.com/images/batzang1-thumb-339x198.jpg" alt="batzang1.jpg" class="mt-image-none" style="" height="198" width="339" /></a></span><br /> </div><div><div align="center">Click to Enlarge<br /></div><br />You'll notice Batman, over on the right there. Let's take a closer look:<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><img alt="batzang2.gif" src="http://blog.spywareguide.com/images/batzang2.gif" class="mt-image-none" style="" height="266" width="316" /></span></div><br /></div><div><br />"Free Online Batman Game"? Well, that's curious because I follow comics pretty closely and I'd be the first to know if an "Online Batman Game" had been in the works (this advert has been doing the rounds on <a href="http://forums.superherohype.com/showthread.php?p=15406107">numerous</a> <a href="http://dcboards.warnerbros.com/web/message.jspa?messageID=2004718393#2004718393">comic-related</a> <a href="http://www.comicforum.de/showpost.php?s=543cba941aeb245f8174ec4943be2adc&amp;p=2733165&amp;postcount=29">websites</a>. Visit the URL in the ad - Batmangame.info - and you'll see this...<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><a href="http://blog.spywareguide.com/images/batzang3.html" onclick="window.open('http://blog.spywareguide.com/images/batzang3.html','popup','width=725,height=666,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0'); return false"><img src="http://blog.spywareguide.com/images/batzang3-thumb-325x298.gif" alt="batzang3.gif" class="mt-image-none" style="" height="298" width="325" /></a></span><br /></div></div><div><div align="center">Click to Enlarge<br /></div><br />There it is again - "Online Batman Game". Furthermore, the text goes on to say:<br /><i><br />"Batman Online lets you do anything and every little thing you'd like in a Batman game. From leveling up your character to destroying villans, it has it all. Download and play this amazing game now, all for free! I'm sure you'll be playing for hours on end, it's that much fun.<br /><br />&nbsp;&nbsp;&nbsp; Level Up Your Character<br />&nbsp;<br />&nbsp;&nbsp; Explore a Huge Vast World<br />&nbsp;<br />&nbsp;&nbsp; Play Online With Your Friends<br />&nbsp;<br />&nbsp;&nbsp; Hundreds of Quests To Finish<br />&nbsp;<br />&nbsp;&nbsp; Perfect Battle System<br /><br />So start your Batman adventure today! Download the&nbsp; full game below and fight them all!"</i><br /><br />Note that they specifically call it "Batman Online". It specifically sounds like a text blurb you'd expect to see with a <a href="http://en.wikipedia.org/wiki/Massively_multiplayer_online_role-playing_game">MMORPG</a>. However, something isn't quite right here.<br /><br /><b>1)</b> The only DC licensed MMORPG anybody knows of is <a href="http://en.wikipedia.org/wiki/DC_Universe_%28video_game%29">this</a>, and it isn't due out until 2009. It's not Batman-centric, either.<br /><br /><b>2)</b> The screenshots are lifted from the <a href="http://en.wikipedia.org/wiki/Batman_Begins_%28video_game%29">Batman Begins videogame</a>, which came out in 2005. If you were offering a "Batman Online Game", wouldn't you use screenshots from that instead of an unrelated title?<br /><br /><b>3)</b> Absolutely no licensing, copyright or legal mumbo-jumbo on the page anywhere. DC and Warner Bros don't roll like that.<br /><br /><b>4)</b> The website - Batmangame(dot)info - is <a href="http://whois.domaintools.com/batmangame.info">registered anonymously</a>. Not exactly something you see everyday for websites related to licensed DC franchises such as Batman videogames.<br /><br /><b>5)</b> "To download and play the Batman Online Game you must download and install Zango as well. It is free, very easy to install and will give you access to the full game."<br /><br />Shall we continue?<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><a href="http://blog.spywareguide.com/images/batzang4.html" onclick="window.open('http://blog.spywareguide.com/images/batzang4.html','popup','width=757,height=638,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0'); return false"><img src="http://blog.spywareguide.com/images/batzang4-thumb-357x300.gif" alt="batzang4.gif" class="mt-image-none" style="" height="300" width="357" /></a></span><br />Click to Enlarge<br /></div><br />A Zango installer prompt, complete with picture of Batman at the top. If you say "No" to the install, you end up on Google.com. What happens if you click "Start"? Well, you'll get the <a href="http://blog.spywareguide.com/images/batzang5.gif">usual collection</a> of <a href="http://blog.spywareguide.com/images/batzang6.gif">Zango installer screens</a> including one that rather humorously has a guy in a superhero costume.<br /><br /></div><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><img alt="batzang7.gif" src="http://blog.spywareguide.com/images/batzang7.gif" class="mt-image-none" style="" height="333" width="419" /></span></div><div><br />Once everything is installed, you're taken to another page and from here things just get plain confusing. Remember, up to this point you've been promised an "Online Batman Game", the description of which is clearly intended to evoke images of a MMORPG. However....<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><a href="http://blog.spywareguide.com/images/batveng.html" onclick="window.open('http://blog.spywareguide.com/images/batveng.html','popup','width=841,height=623,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0'); return false"><img src="http://blog.spywareguide.com/images/batveng-thumb-341x252.jpg" alt="batveng.jpg" class="mt-image-none" style="" height="252" width="341" /></a></span><br />Click to Enlarge<br /></div><br />All of a sudden, you're being told you're downloading "Batman: Vengeance" on a cheap-looking splash page and shown what looks like an unofficially ripped <a href="http://www.youtube.com/watch?v=D1WqzbNB8tM&amp;eurl=http://www.batmangame.info/setup.exe">Batman: Vengeance trailer</a> on Youtube.<br /><br />In case you're unaware, Batman: Vengeance is a videogame <a href="http://en.wikipedia.org/wiki/Batman_Vengeance">first launched way back in 2001</a> for consoles (followed shortly after by a PC version). What does this have to do with an "Online Batman Game"? Well, nothing, actually. Aside from the fact you were presented with one thing and are now handed another, things get even stranger when you see the download location:<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><a href="http://blog.spywareguide.com/images/batzang00.html" onclick="window.open('http://blog.spywareguide.com/images/batzang00.html','popup','width=542,height=281,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0'); return false"><img src="http://blog.spywareguide.com/images/batzang00-thumb-342x177.gif" alt="batzang00.gif" class="mt-image-none" style="" height="177" width="342" /></a></span><br /></div></div><div><div align="center">Click to Enlarge<br /></div><br />Have you ever heard of an officially licensed game being offered via Rapidshare downloads? It's possible, I guess, but it seems a little odd. However, the <i>real</i> oddness is reserved for the "Online Batman game" itself.<br /><br />Remember, we've been promised "Hundreds of quests", "A huge vast world", the ability to "level up your character" and (of course) the "play online with your friends" promise of greatness.<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><a href="http://blog.spywareguide.com/images/batinstall.html" onclick="window.open('http://blog.spywareguide.com/images/batinstall.html','popup','width=811,height=549,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0'); return false"><img src="http://blog.spywareguide.com/images/batinstall-thumb-311x210.gif" alt="batinstall.gif" class="mt-image-none" style="" height="210" width="311" /></a></span><br />Click to Enlarge<br /></div><br />Imagine your dismay, then, when you've installed Zango, downloaded the game from Rapidshare using up around 140MB of bandwidth, installed it and....<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><img alt="batdemo.gif" src="http://blog.spywareguide.com/images/batdemo.gif" class="mt-image-none" style="" height="288" width="451" /></span></div><br />Oh dear.<br /><br />Not only are you given a totally different game than what was advertised, you're given a DEMO VERSION of that game with <a href="http://blog.spywareguide.com/images/menu.gif">four short sample levels</a> present, no online functionality and quite a few less quests than the "hundreds" advertised.<br /><br />Hilariously, you can download a 100% legit copy of this demo <a href="http://www.fileplanet.com/110885/110000/fileinfo/Batman-Vengeance-Demo">here at Fileplanet</a>, sans Adware. Setting aside the issue of whether this file is actually sitting on Rapidshare with either Ubisoft or DC / Warner Bros permission (and if it IS okay to be there, I'm pretty sure it's NOT okay to falsely advertise it as some kind of MMORPG) there are some questions that need to be raised here.<br /><br />When this guy approached them with his website, did nobody stop to think that this game did not actually match up with the "Online Batman" game it was touted as? Didn't someone at Zango Quality Control actually download the game and see the big "This is a demo" wording as soon as it starts up? Or question why the <a href="http://blog.spywareguide.com/images/begins1.gif">screenshots</a> on the website don't look like the graphics for <a href="http://blog.spywareguide.com/images/batveng1.gif">Batman: Vengeance</a> in the slightest?<br /><br />However you look at it, this is a scam, pure and simple. Whoever came up with the idea of an "Online Batman Game" is lying through their teeth. Of course, because their website is registered anonymously we have no idea who the culprit is, unless of course Zango want to deposit them on the steps of Gotham City and let me dispense some Batman-style justice to their posterior.<br /><br />However, based on the way these things tend to go - God forbid anyone ever offer up the identity of someone happily scamming the public at large, even when that person is dragging the name of the company associated with them through the mud by their antics - I think I might be waiting some time for the Bat Signal...<br /></div>
        
    ]]></content:encoded>
      <pubDate>Wed, 03 Sep 2008 07:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/batman">batman</category>
      <category domain="http://securityratty.com/tag/batman online">batman online</category>
      <category domain="http://securityratty.com/tag/batman game">batman game</category>
      <category domain="http://securityratty.com/tag/online batman game">online batman game</category>
      <category domain="http://securityratty.com/tag/batman online game">batman online game</category>
      <category domain="http://securityratty.com/tag/batman adventure">batman adventure</category>
      <category domain="http://securityratty.com/tag/batman begins videogame">batman begins videogame</category>
      <category domain="http://securityratty.com/tag/batman-centric">batman-centric</category>
      <category domain="http://securityratty.com/tag/batman-style justice">batman-style justice</category>
      <source url="http://blog.spywareguide.com/2008/09/zango-and-the-batman-online-vi.html">Zango And The Batman Online Videogame</source>
    </item>
    <item>
      <title><![CDATA[Epic Cash Vs Zango - Legal Action Incoming?]]></title>
      <link>http://securityratty.com/article/56bded7fb3ed5dae83e3d1598fe152c0</link>
      <guid>http://securityratty.com/article/56bded7fb3ed5dae83e3d1598fe152c0</guid>
      <description><![CDATA[Over the last few days I've seen a scan doing the rounds on a couple of adult webmaster sites &amp; forums, like here (Warning: there may be NSFW content on that forum). There's another link here...]]></description>
      <content:encoded><![CDATA[
        Over the last few days I've seen a scan doing the rounds on a couple of adult webmaster sites &amp; forums, like <a href="http://www.wickedfire.com/shooting-shit/38882-lawsuit-filed-against-zango.html">here</a> (Warning: there may be NSFW content on that forum). There's another link <a href="http://www.thereisnomoneyinporn.com/story.php?title=Serious_post_zango__AFF_lawsuit_and_those_who_want_to_join_after_i_already_filed-">here</a> regarding some follow up information which seems to be safe for work, but the forum it links to most definitely isn't. Just a heads up.<br /><br />Anyway, the source of all the commotion is <a href="http://img363.imageshack.us/img363/1554/scan0001xq1.jpg">this scan</a>, the contents of which read:<br /><br /><i>Epic Cash Files Lawsuit Against Zango and Adult Friend Finder<br /><br />On August 26, 2008, Epic Cash LLC filed suit against Zango, Inc. and the owners of AdultFriendFinder.com for Unfair Business Practices, Unfair Competition, Tortious Interference with Prospective Economic Advantage, Unjist Enrichment, and Conversion.<br /></i><br />Check the scan for full details - the root of the problem seems to be Epic Cash claiming Zango Adware diverted traffic away from Epic Cash websites and "converted Epic Cash's business to their benefit".&nbsp; This could prove to be interesting...<br /> 
        
    ]]></content:encoded>
      <pubDate>Mon, 01 Sep 2008 14:58:06 +0000</pubDate>
      <category domain="http://securityratty.com/tag/epic cash">epic cash</category>
      <category domain="http://securityratty.com/tag/zango">zango</category>
      <category domain="http://securityratty.com/tag/epic cash websites">epic cash websites</category>
      <category domain="http://securityratty.com/tag/zango adware">zango adware</category>
      <category domain="http://securityratty.com/tag/business">business</category>
      <category domain="http://securityratty.com/tag/unfair business practices">unfair business practices</category>
      <category domain="http://securityratty.com/tag/adult webmaster sites">adult webmaster sites</category>
      <category domain="http://securityratty.com/tag/prospective economic advantage">prospective economic advantage</category>
      <category domain="http://securityratty.com/tag/scan">scan</category>
      <source url="http://blog.spywareguide.com/2008/09/epic-cash-vs-zango-legal-actio.html">Epic Cash Vs Zango - Legal Action Incoming?</source>
    </item>
    <item>
      <title><![CDATA[Holy Media Codecs, Batman!]]></title>
      <link>http://securityratty.com/article/3d984264f929456ea8e4f274d55394ef</link>
      <guid>http://securityratty.com/article/3d984264f929456ea8e4f274d55394ef</guid>
      <description><![CDATA[Batman is still in full swing at the box office - I'm sure me seeing it seven times probably didn't hurt - so with that in mind (and thoughts of the Zango / Dark Knight issue still rattling around my...]]></description>
      <content:encoded><![CDATA[
        Batman is still in full swing at the box office - I'm sure me seeing it seven times probably didn't hurt - so with that in mind (and thoughts of the <a href="http://www.theregister.co.uk/2008/08/18/dark_knight_zango_affiliate_gateway/">Zango / Dark Knight issue</a> still rattling around my brain) I thought it would be fun to see exactly how quickly it can all go wrong when looking for Dark Knight material online.<br /><br />The answer is: extremely quickly.<br /><br />There's a lot of sites out there claiming to carry "full versions" of The Dark Knight, and although they don't offer Zango, they <i>do</i> offer fake media codecs (which usually do all sorts of horrible things to a computer). Let's pull one of these sites apart as an example of how the scam fits together.<br /><br />Here's a typical site pushing what they claim to be The Dark Knight:<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><a href="http://blog.spywareguide.com/images/dbman000.html" onclick="window.open('http://blog.spywareguide.com/images/dbman000.html','popup','width=717,height=564,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0'); return false"><img src="http://blog.spywareguide.com/images/dbman000-thumb-317x249.jpg" alt="dbman000.jpg" class="mt-image-none" style="" height="249" width="317" /></a></span><br />Click to Enlarge<br /></div><br />Dijgg(dot)com, an obvious Digg.com knockoff apparently hosting a large streaming window - the movie quality will be awesome, won't it? Well, actually, no it won't.<br /><br />In the middle of the video window is a popup:<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><img alt="dbman0.jpg" src="http://blog.spywareguide.com/images/dbman0.jpg" class="mt-image-none" style="" height="145" width="399" /></span></div><br /><br /> <div>Install the "codec", and this won't end well. The EXE comes from a site called Favoritetube(dot)com:<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><img alt="dbman1.jpg" src="http://blog.spywareguide.com/images/dbman1.jpg" class="mt-image-none" style="" height="203" width="348" /></span></div><br /><br />A quick check for the <a href="http://www.siteadvisor.com/sites/favoritetube.net/postid?p=1063293">safety</a> <a href="http://safeweb.norton.com/report/show?name=favoritetube.net">ratings</a> of that website should be enough to tell you this is a scam. Indeed, there isn't even a movie being streamed here (despite it saying "Connecting" at the bottom of the movie player) - because if you right click on the player itself:<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><img alt="dbman0000.jpg" src="http://blog.spywareguide.com/images/dbman0000.jpg" class="mt-image-none" style="" height="370" width="418" /></span></div><br /></div><div><br />You can see the "player" is actually just a static image (because I'm given the option to "Copy Image Location"). The image is hosted at Favoritetube, just like the "codecs":<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><a href="http://blog.spywareguide.com/images/dbman2.html" onclick="window.open('http://blog.spywareguide.com/images/dbman2.html','popup','width=655,height=570,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0'); return false"><img src="http://blog.spywareguide.com/images/dbman2-thumb-355x308.jpg" alt="dbman2.jpg" class="mt-image-none" style="" height="308" width="355" /></a></span><br /><br />Click to Enlarge<br /></div><br />There are quite a lot of these sites floating around out there at present:<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><a href="http://blog.spywareguide.com/images/dbman3.html" onclick="window.open('http://blog.spywareguide.com/images/dbman3.html','popup','width=738,height=532,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0'); return false"><img src="http://blog.spywareguide.com/images/dbman3-thumb-338x243.jpg" alt="dbman3.jpg" class="mt-image-none" style="" height="243" width="338" /></a></span><br /><br /></div></div><div><div align="center">Click to Enlarge<br /></div><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><a href="http://blog.spywareguide.com/images/dbman4.html" onclick="window.open('http://blog.spywareguide.com/images/dbman4.html','popup','width=599,height=533,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0'); return false"><img src="http://blog.spywareguide.com/images/dbman4-thumb-399x355.jpg" alt="dbman4.jpg" class="mt-image-none" style="" height="355" width="399" /></a></span><br /></div></div><div><div align="center">Click to Enlarge<br /></div><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><a href="http://blog.spywareguide.com/images/dbman100.html" onclick="window.open('http://blog.spywareguide.com/images/dbman100.html','popup','width=625,height=516,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0'); return false"><img src="http://blog.spywareguide.com/images/dbman100-thumb-325x268.jpg" alt="dbman100.jpg" class="mt-image-none" style="" height="268" width="325" /></a></span><br /></div></div><div><div align="center">Click to Enlarge<br /></div><br />At this point, it's a given that I'm going to show you what happens if you install one of the files typically pushed from the above sites, right? Well, wait no longer - this....<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><img alt="dbman7.jpg" src="http://blog.spywareguide.com/images/dbman7.jpg" class="mt-image-none" style="" height="81" width="84" /></span></div><br /></div><div><br />...will deposit a rogue antispyware tool on your desktop (one of more more obnoxious ones that refuses to leave you alone):<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><a href="http://blog.spywareguide.com/images/antispycheck1.html" onclick="window.open('http://blog.spywareguide.com/images/antispycheck1.html','popup','width=877,height=668,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0'); return false"><img src="http://blog.spywareguide.com/images/antispycheck1-thumb-377x287.jpg" alt="antispycheck1.jpg" class="mt-image-none" style="" height="287" width="377" /></a></span><br /><br />Click to Enlarge<br /></div><br />Strange and annoying icons will start to creep across your desktop:<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><img alt="dbman8.jpg" src="http://blog.spywareguide.com/images/dbman8.jpg" class="mt-image-none" style="" height="82" width="245" /></span></div><br /></div><div><br />....and you'll have more fake system alerts than you can shake a very large stick at:<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><img alt="antispycheck22.jpg" src="http://blog.spywareguide.com/images/antispycheck22.jpg" class="mt-image-none" style="" height="304" width="273" /></span></div><br /><br />This concludes my public safety announcement. I'm off to see Dark Knight again...<br /></div>
        
    ]]></content:encoded>
      <pubDate>Wed, 27 Aug 2008 06:10:53 +0000</pubDate>
      <category domain="http://securityratty.com/tag/dark knight issue">dark knight issue</category>
      <category domain="http://securityratty.com/tag/dark knight">dark knight</category>
      <category domain="http://securityratty.com/tag/movie player">movie player</category>
      <category domain="http://securityratty.com/tag/click">click</category>
      <category domain="http://securityratty.com/tag/player">player</category>
      <category domain="http://securityratty.com/tag/enlarge">enlarge</category>
      <category domain="http://securityratty.com/tag/image">image</category>
      <category domain="http://securityratty.com/tag/copy image location">copy image location</category>
      <category domain="http://securityratty.com/tag/movie">movie</category>
      <source url="http://blog.spywareguide.com/2008/08/holy-media-codecs-batman.html">Holy Media Codecs, Batman!</source>
    </item>
    <item>
      <title><![CDATA[Spammers Take A Cheap Shot...]]></title>
      <link>http://securityratty.com/article/2bd234de99d23ff4b013abce95e7d324</link>
      <guid>http://securityratty.com/article/2bd234de99d23ff4b013abce95e7d324</guid>
      <description><![CDATA[I'm on holiday this week, but thought I'd better give this a mention anyway (plus, when did being on holiday ever stop me from posting stuff on blogs, right

I was surprised to see this posted to the...]]></description>
      <content:encoded><![CDATA[
        I'm on holiday this week, but thought I'd better give this a mention anyway (plus, when did being on holiday ever stop me from posting stuff on blogs, right?)<br /><br />I was surprised to see this posted to the comments section of the <a href="http://sunbeltblog.blogspot.com/">Sunbelt Blog</a>:<br /><br /><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><img alt="spgspam1.gif" src="http://blog.spywareguide.com/images/spgspam1.gif" class="mt-image-none" style="" height="144" width="359" /></span><br /> <div><br />I was about as surprised as The Dean was!<br /><br />To quote a further post from The Dean:<br /><br /><i>"Well, that's weird. Isn't spywareguide Paperghost's blog? I know he
wouldn't spam here. And, the link on the first comment goes to a 404
page."</i><br /><br />So, we have someone spamming with broken English, dropping links to 404 pages on Spywareguide. Curious.<br /><br />Now, I did have some suspicions on this - for starters, the recent blogs regarding the pirate movie websites that pop Zango installers just hit a few <a href="http://computerworld.com/action/article.do?command=viewArticleBasic&amp;taxonomyName=privacy&amp;articleId=9112881&amp;taxonomyId=84&amp;intsrc=kc_top">news</a> <a href="http://www.theregister.co.uk/2008/08/18/dark_knight_zango_affiliate_gateway/">websites</a>. As <a href="http://blog.spywareguide.com/2008/08/another-site-hiding-pirate-mov.html">this article</a> mentions, a lot of the sites involved in this are from Asian regions - China, Indonesia etc. I couldn't help but notice the name of the poster was "Tam" - a common name in certain parts of Asia.<br /><br />Coincidence? Or a possible affiliate not too happy about this being highlighted? Well, a quick email later and the results for the spammer are in:<br /><br /><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><img alt="spgspam2.gif" src="http://blog.spywareguide.com/images/spgspam2.gif" class="mt-image-none" style="" height="185" width="430" /></span>
<br /><br />A potentially forged Reverse DNS aside, it's a strange thing indeed that they just happen to resolve to Vietnam given that a good portion of these sites are in Asia, isn't it?<br /><br />I think I'll see if any are owned by someone called "Tam".<br /><br />When I return from my holiday, of course....<br /></div><div><br /></div>
        
    ]]></content:encoded>
      <pubDate>Tue, 19 Aug 2008 10:24:05 +0000</pubDate>
      <category domain="http://securityratty.com/tag/holiday">holiday</category>
      <category domain="http://securityratty.com/tag/pop zango installers">pop zango installers</category>
      <category domain="http://securityratty.com/tag/sunbelt blog">sunbelt blog</category>
      <category domain="http://securityratty.com/tag/blogs">blogs</category>
      <category domain="http://securityratty.com/tag/spywareguide paperghost">spywareguide paperghost</category>
      <category domain="http://securityratty.com/tag/recent blogs">recent blogs</category>
      <category domain="http://securityratty.com/tag/blog">blog</category>
      <category domain="http://securityratty.com/tag/spywareguide">spywareguide</category>
      <category domain="http://securityratty.com/tag/news websites">news websites</category>
      <source url="http://blog.spywareguide.com/2008/08/spammers-take-a-cheap-shot.html">Spammers Take A Cheap Shot...</source>
    </item>
    <item>
      <title><![CDATA[Lost.....and Found]]></title>
      <link>http://securityratty.com/article/1315aa8a559dddd4479c65bf88b0f2fc</link>
      <guid>http://securityratty.com/article/1315aa8a559dddd4479c65bf88b0f2fc</guid>
      <description><![CDATA[The practice of affiliates signing up with Zango then hiding pirated movies behind their installer prompt ([ 1 ], [ 2 ]) takes another twist, as we go hunting for TV episodes instead of movies and...]]></description>
      <content:encoded><![CDATA[
        The practice of affiliates signing up with Zango then hiding pirated movies behind their installer prompt ([<a href="http://blog.spywareguide.com/2008/08/a-dark-knight-for-zango.html">1</a>], [<a href="http://blog.spywareguide.com/2008/08/another-site-hiding-pirate-mov.html">2</a>]) takes another twist, as we go hunting for TV episodes instead of movies and find....<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><a href="http://blog.spywareguide.com/images/zan1.html" onclick="window.open('http://blog.spywareguide.com/images/zan1.html','popup','width=982,height=581,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0'); return false"><img src="http://blog.spywareguide.com/images/zan1-thumb-382x226.gif" alt="zan1.gif" class="mt-image-none" style="" height="226" width="382" /></a></span><br /> </div><div><div align="center">Click to Enlarge<br /></div><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><a href="http://blog.spywareguide.com/images/zan2.html" onclick="window.open('http://blog.spywareguide.com/images/zan2.html','popup','width=949,height=570,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0'); return false"><img src="http://blog.spywareguide.com/images/zan2-thumb-349x209.gif" alt="zan2.gif" class="mt-image-none" style="" height="209" width="349" /></a></span><br /></div></div><div><div align="center">Click to Enlarge<br /></div><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><a href="http://blog.spywareguide.com/images/zan3.html" onclick="window.open('http://blog.spywareguide.com/images/zan3.html','popup','width=948,height=584,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0'); return false"><img src="http://blog.spywareguide.com/images/zan3-thumb-348x214.gif" alt="zan3.gif" class="mt-image-none" style="" height="214" width="348" /></a></span><br /></div></div><div><div align="center">Click to Enlarge<br /></div><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><a href="http://blog.spywareguide.com/images/zan4.html" onclick="window.open('http://blog.spywareguide.com/images/zan4.html','popup','width=841,height=584,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0'); return false"><img src="http://blog.spywareguide.com/images/zan4-thumb-341x236.gif" alt="zan4.gif" class="mt-image-none" style="" height="236" width="341" /></a></span><br /></div></div><div><div align="center">Click to Enlarge<br /></div><br />......TV shows (apparently ripped and streamed from Chinese Youtube-style websites), hidden behind Zango installer prompts. Obviously, this is something of a mini industry we have here but I'm faintly alarmed that so many of these affiliates are happily churning out these kinds of sites. I'm also pretty sure Zango doesn't want people seeing what effectively says "Free ripped off movies online sponsored by Zango" on their installer prompts, either.<br /><br />As a side note, it's not just Zango affiliates doing this - here's another example, this time for something called "Cpalead.com" that wants you to fill in a survey in return for seeing "free" episodes of Lost:<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><a href="http://blog.spywareguide.com/images/cpal1.html" onclick="window.open('http://blog.spywareguide.com/images/cpal1.html','popup','width=836,height=603,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0'); return false"><img src="http://blog.spywareguide.com/images/cpal1-thumb-336x242.gif" alt="cpal1.gif" class="mt-image-none" style="" height="242" width="336" /></a></span><br />Click to Enlarge<br /></div><br />In case you were wondering, my monitor isn't broken, they just grey out the page when the popup appears. The Lost episodes appear to be ripped by end-users and uploaded to Megavideo.com.<br /><br />The sites above are<br /><br />lost-stream(dot)com<br />ietv(dot)co.uk/category/watch-lost-online<br />watchprisonbreakonlinefree(dot)com<br />watch-lost-online(dot)info<br />www.heroesstreaming(dot)com<br /><br />I guess I ended up with a trilogy after all.<br /></div><div><br /></div>
        
    ]]></content:encoded>
      <pubDate>Fri, 15 Aug 2008 10:20:17 +0000</pubDate>
      <category domain="http://securityratty.com/tag/zango installer prompts">zango installer prompts</category>
      <category domain="http://securityratty.com/tag/installer prompts">installer prompts</category>
      <category domain="http://securityratty.com/tag/lost">lost</category>
      <category domain="http://securityratty.com/tag/zango">zango</category>
      <category domain="http://securityratty.com/tag/tv episodes">tv episodes</category>
      <category domain="http://securityratty.com/tag/episodes">episodes</category>
      <category domain="http://securityratty.com/tag/enlarge">enlarge</category>
      <category domain="http://securityratty.com/tag/click">click</category>
      <category domain="http://securityratty.com/tag/dot">dot</category>
      <source url="http://blog.spywareguide.com/2008/08/lostand-found.html">Lost.....and Found</source>
    </item>
    <item>
      <title><![CDATA[Another Site Hiding Pirate Movies Behind a Zango Installer Prompt]]></title>
      <link>http://securityratty.com/article/503b43d35c6104929785ac82ff1128b5</link>
      <guid>http://securityratty.com/article/503b43d35c6104929785ac82ff1128b5</guid>
      <description><![CDATA[A few days ago, I wrote about a site asking you to install Zango before you could view the site content (which happens to be pirated movies ). Well, another site has come to light doing a similar...]]></description>
      <content:encoded><![CDATA[
        A few days ago, I wrote about a site asking you to install Zango before you could view the site content (which happens to be <a href="http://blog.spywareguide.com/2008/08/a-dark-knight-for-zango.html">pirated movies</a>). Well, another site has come to light doing a similar thing - I'm starting to wonder how many of these are actually out there. It's also served to highlight what I feel is a particularly confusing popup box, but we'll get to that later. First off, here's the website in question:<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><a href="http://blog.spywareguide.com/images/bc0.html" onclick="window.open('http://blog.spywareguide.com/images/bc0.html','popup','width=846,height=676,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0'); return false"><img src="http://blog.spywareguide.com/images/bc0-thumb-346x276.jpg" alt="bc0.jpg" class="mt-image-none" style="" height="276" width="346" /></a></span><br /> </div><div><div align="center">Click to Enlarge<br /></div><br />Bestcinemaonline(dot)com. As you can see, the site is similar to the last one (except that site is registered <a href="http://whois.domaintools.com/movietvonline.com">anonymously</a> to an individual in China, whereas this one is registered to <a href="http://whois.domaintools.com/bestcinemaonline.com">someone in Indonesia</a>). Also, the format is different - the last site was more of a "movie repository", whereas this one takes the shape and style of a blog with each individual entry pointing to a film. And what films they are!<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><img alt="bc5.jpg" src="http://blog.spywareguide.com/images/bc5.jpg" class="mt-image-none" style="" height="228" width="309" /></span><br /></div></div><div><div align="center">Batman!<br /></div><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><img alt="bc6.jpg" src="http://blog.spywareguide.com/images/bc6.jpg" class="mt-image-none" style="" height="244" width="363" /></span><br /></div></div><div><div align="center">X-Files!<br /></div><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><a href="http://blog.spywareguide.com/images/bc2.html" onclick="window.open('http://blog.spywareguide.com/images/bc2.html','popup','width=672,height=649,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0'); return false"><img src="http://blog.spywareguide.com/images/bc2-thumb-372x359.jpg" alt="bc2.jpg" class="mt-image-none" style="" height="359" width="372" /></a></span><br />Click to Enlarge<br /></div><br /></div><div>Hellboy! (Is that even out yet?)<br /><br />As you might have expected, a lot of the movies end up looking like this when attempting to watch them:<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><a href="http://blog.spywareguide.com/images/bc3.html" onclick="window.open('http://blog.spywareguide.com/images/bc3.html','popup','width=771,height=573,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0'); return false"><img src="http://blog.spywareguide.com/images/bc3-thumb-371x275.jpg" alt="bc3.jpg" class="mt-image-none" style="" height="275" width="371" /></a></span><br /></div></div><div><div align="center">Click to Enlarge<br /></div><br />.....whoops.<br /><br />I must also give a special mention to one of the most confusing popup warnings I've ever seen - it really threw me, and I admit I nearly installed Zango accidentally after seeing it. If (when prompted with the Zango installer box) you click "Cancel", this appears in the middle of your screen:<br /><br /><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><img alt="bc1.jpg" src="http://blog.spywareguide.com/images/bc1.jpg" class="mt-image-none" style="" height="126" width="476" /></span><br /></div><div><br /><i>"Click <b>OK to Cancel </b>or<b> Click "Cancel" to continue </b>the installation".</i><br /><br />.....Whaaaaaa? That's a bit of a brain bender, right there. I hope this set of writeups doesn't become a Trilogy...<br /><br /><br /></div>
        
    ]]></content:encoded>
      <pubDate>Fri, 15 Aug 2008 03:44:39 +0000</pubDate>
      <category domain="http://securityratty.com/tag/site">site</category>
      <category domain="http://securityratty.com/tag/zango">zango</category>
      <category domain="http://securityratty.com/tag/site content">site content</category>
      <category domain="http://securityratty.com/tag/zango installer box">zango installer box</category>
      <category domain="http://securityratty.com/tag/click">click</category>
      <category domain="http://securityratty.com/tag/movies">movies</category>
      <category domain="http://securityratty.com/tag/individual">individual</category>
      <category domain="http://securityratty.com/tag/cancel">cancel</category>
      <category domain="http://securityratty.com/tag/install zango">install zango</category>
      <source url="http://blog.spywareguide.com/2008/08/another-site-hiding-pirate-mov.html">Another Site Hiding Pirate Movies Behind a Zango Installer Prompt</source>
    </item>
    <item>
      <title><![CDATA[A Dark Knight For Zango?]]></title>
      <link>http://securityratty.com/article/61b33df0818a09cde982b57d42eb49e7</link>
      <guid>http://securityratty.com/article/61b33df0818a09cde982b57d42eb49e7</guid>
      <description><![CDATA[Here's a site - movietvonline(dot)com - that requires you to install Zango in order to view the content




Click to Enlarge

Nothing unusual there, though I did think the owners of the website were...]]></description>
      <content:encoded><![CDATA[
        Here's a site - movietvonline(dot)com - that requires you to install Zango in order to view the content.<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><a href="http://blog.spywareguide.com/images/joker1.html" onclick="window.open('http://blog.spywareguide.com/images/joker1.html','popup','width=968,height=590,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0'); return false"><img src="http://blog.spywareguide.com/images/joker1-thumb-368x224.jpg" alt="joker1.jpg" class="mt-image-none" style="" height="224" width="368" /></a></span><br /><br />Click to Enlarge<br /></div><br />Nothing unusual there, though I did think the owners of the website were pushing things a <i>little</i>, perhaps, to ask you to install something to view content you could view for free on the <a href="http://thedarkknight.warnerbros.com/">official website</a>.<br /><br />Anyway.<br /><br />Turns out I was somewhat wrong, because they're not asking you to download Zango in order to watch <i>trailers</i>:<br /><br /><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><img alt="joker2.jpg" src="http://blog.spywareguide.com/images/joker2.jpg" class="mt-image-none" style="" height="300" width="529" /></span><br /><br />They want you to agree to install Zango in order to view whole <i>movies</i>, some streamed on the movietvonline website from other sources, others in the form of broken up downloads hosted on file-downloading sites.<br /><br />Here's a shot of what appears to be a badly made camcorder (complete with people talking and scrunching up paper in the background) streamed on the website:<br /><br /><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><img alt="joker3.jpg" src="http://blog.spywareguide.com/images/joker3.jpg" class="mt-image-none" style="" height="460" width="522" /></span>
<br /><br />Clearly, the Joker isn't asking Batman "Why so serious" - he's asking him why the camcorder rip is so seriously bad. In fact, the whole site appears to be nothing more than a mass repository of dubiously acquired movie copies:<br /><br /><div align="center"><span class="mt-enclosure mt-enclosure-image" style="display: inline;"><a href="http://blog.spywareguide.com/images/joker4.html" onclick="window.open('http://blog.spywareguide.com/images/joker4.html','popup','width=897,height=720,scrollbars=no,resizable=no,toolbar=no,directories=no,location=no,menubar=no,status=no,left=0,top=0'); return false"><img src="http://blog.spywareguide.com/images/joker4-thumb-397x318.jpg" alt="joker4.jpg" class="mt-image-none" style="" height="318" width="397" /></a></span><br /><br />Click to Enlarge<br /></div><br />...Holy Pirated Content, Batman!<br />
        
    ]]></content:encoded>
      <pubDate>Wed, 13 Aug 2008 14:49:36 +0000</pubDate>
      <category domain="http://securityratty.com/tag/view">view</category>
      <category domain="http://securityratty.com/tag/view content">view content</category>
      <category domain="http://securityratty.com/tag/website">website</category>
      <category domain="http://securityratty.com/tag/official website">official website</category>
      <category domain="http://securityratty.com/tag/movietvonline website">movietvonline website</category>
      <category domain="http://securityratty.com/tag/install">install</category>
      <category domain="http://securityratty.com/tag/install zango">install zango</category>
      <category domain="http://securityratty.com/tag/movietvonline">movietvonline</category>
      <category domain="http://securityratty.com/tag/content">content</category>
      <source url="http://blog.spywareguide.com/2008/08/a-dark-knight-for-zango.html">A Dark Knight For Zango?</source>
    </item>
    <item>
      <title><![CDATA[Ad software maker likely violates copyright]]></title>
      <link>http://securityratty.com/article/c00dbf692a60b52a9e32b7d53662b3aa</link>
      <guid>http://securityratty.com/article/c00dbf692a60b52a9e32b7d53662b3aa</guid>
      <description><![CDATA[Some videos offered by advertising software maker Zango are likely being distributed without permission from the copyright holders, according to a spyware...]]></description>
      <content:encoded><![CDATA[Some videos offered by advertising software maker Zango are likely being distributed without permission from the copyright holders, according to a spyware researcher.]]></content:encoded>
      <pubDate>Wed, 28 May 2008 20:00:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/software maker zango">software maker zango</category>
      <category domain="http://securityratty.com/tag/copyright holders">copyright holders</category>
      <category domain="http://securityratty.com/tag/spyware researcher">spyware researcher</category>
      <category domain="http://securityratty.com/tag/videos">videos</category>
      <category domain="http://securityratty.com/tag/permission">permission</category>
      <source url="http://www.networkworld.com/news/2008/052908-researcher-ad-software-maker-likely.html?fsrc=rss-security">Ad software maker likely violates copyright</source>
    </item>
    <item>
      <title><![CDATA[Beware the Zangobot!]]></title>
      <link>http://securityratty.com/article/782fc977393aecd47d6f7edcda303787</link>
      <guid>http://securityratty.com/article/782fc977393aecd47d6f7edcda303787</guid>
      <description><![CDATA[While this news is likely speculative and unfounded, it has ramifications I couldn't resist. My good friend Steve and I have, for the last couple of years, jokingly inferred that Zango must have some...]]></description>
      <content:encoded><![CDATA[While this news is likely speculative and unfounded, it has ramifications I couldn't resist. My good friend Steve and I have, for the last couple of years, jokingly inferred that Zango must have some form of bot, be it a crawler or IRC/P2P. Now this was stated entirely in jest, mind you, but I have to throw the phrase open now that to a story from  <a href="http://blog.trendmicro.com/zango-and-storm-possibly-in-cahoots/">Trendmicro</a> claiming <span style="font-style:italic;">Zango and Storm: Possibly in Cahoots</span>.<br /><br />How could I pass? This is indeed the prospect of a <span style="font-weight:bold;">Zangobot</span>!<br /><br />From Trend's post: <span style="font-style:italic;">"The presence of these clues means either of two possibilities. One, that Storm is now targeting computers that have Zango adware installed in them, or two, that Storm has now been commissioned to deploy Zango adware. Zango (also ePIPO, 180solutions, HotBar) is an adware company notorious for planting software that runs on startup, displays advertisements, and comes bundled with other software."</span><br /><br />Alex Eckelberry rightfully puts a cautionary spin on the story in his <a href="http://sunbeltblog.blogspot.com/2008/05/zango-and-storm.html">post</a> on the Sunbelt blog:<br /><span style="font-style:italic;">"After years of tracking Zango/180, etc., we have a really hard time believing that Zango would knowingly work with distributors of Storm. While there’s no love between us, they're not complete idiots, and they know that if they got caught they'd be in serious trouble with the FTC."</span><br /><br />Nonetheless, let the speculation and research begin.<br /><span style="font-weight:bold;">BEWARE THE ZANGOBOT!<br /></span><br />I hereby declare a contest! We need a Zangobot graphic. Get your creative juices flowing and send your <span style="font-weight:bold;">Zangobot</span> character/avatar/image to me at holisticinfosec at gmail dot com.<br />The winner receives mention here, an information security book of my choosing, and a <a href="http://thedailywtf.com/">Daily WTF</a> sticker.<br /><br /><a href="http://del.icio.us/post?url=http://holisticinfosec.blogspot.com/2008/05/beware-zangobot.html&title=Beware%20the%20Zangobot! " title="Beware the Zangobot! del.icio.us">del.icio.us</a> | <a href="http://digg.com/submit?phase=2&amp;url=http://holisticinfosec.blogspot.com/2008/05/beware-zangobot.html" title="Beware the Zangobot! ">digg</a>]]></content:encoded>
      <pubDate>Fri, 16 May 2008 05:01:00 +0000</pubDate>
      <category domain="http://securityratty.com/tag/deploy zango adware">deploy zango adware</category>
      <category domain="http://securityratty.com/tag/zango">zango</category>
      <category domain="http://securityratty.com/tag/zangobot">zangobot</category>
      <category domain="http://securityratty.com/tag/zango adware">zango adware</category>
      <category domain="http://securityratty.com/tag/zangobot graphic">zangobot graphic</category>
      <category domain="http://securityratty.com/tag/storm">storm</category>
      <category domain="http://securityratty.com/tag/information security book">information security book</category>
      <category domain="http://securityratty.com/tag/winner receives mention">winner receives mention</category>
      <category domain="http://securityratty.com/tag/adware company notorious">adware company notorious</category>
      <source url="http://holisticinfosec.blogspot.com/2008/05/beware-zangobot.html">Beware the Zangobot!</source>
    </item>
  </channel>
</rss>
