Tuesday, December 06, 2011

shame on Microsoft for paying C|Net to trojan open source software!


Source from: http://seclists.org/nmap-hackers/2011/5

Hi Folks. I've just discovered that C|Net's Download.Com site has started wrapping their Nmap downloads (as well as other free software like VLC) in a trojan installer which does things like installing a sketchy "StartNow" toolbar, changing the user's default search engine to Microsoft Bing, and changing their home page to Microsoft's MSN.

The way it works is that C|Net's download page (screenshot attached) offers what they claim to be Nmap's Windows installer. They even provide the correct file size for our official installer. But users actually get a Cnet-created trojan installer. That program does the dirty work before downloading and executing Nmap's real installer.

Of course the problem is that users often just click through installer screens, trusting that download.com gave them the real installer and knowing that the Nmap project wouldn't put malicious code in our installer. Then the next time the user opens their browser, they find that their computer is hosed with crappy toolbars, Bing searches, Microsoft as their home page, and whatever other shenanigans the software performs! The worst thing is that users will think we (Nmap Project) did this to them!

I took and attached a screen shot of the C|Net trojan Nmap installer in action. Note how they use our registered "Nmap" trademark in big letters right above the malware "special offer" as if we somehow endorsed or allowed this. Of course they also violated our trademark by claiming this download is an Nmap installer when we have nothing to do with the proprietary trojan installer.

In addition to the deception and trademark violation, and potential violation of the Computer Fraud and Abuse Act, this clearly violates Nmap's copyright. This is exactly why Nmap isn't under the plain GPL. Our license (http://nmap.org/book/man-legal.html) specifically adds a clause forbidding software which "integrates/includes/aggregates Nmap into a proprietary executable installer" unless that software itself conforms to various GPL requirements (this proprietary C|Net download.com software and the toolbar don't). We've long known that malicious parties might try to distribute a trojan Nmap installer, but
we never thought it would be C|Net's Download.com, which is owned by CBS! And we never thought Microsoft would be sponsoring this activity!

It is worth noting that C|Net's exact schemes vary. Here is a story about their shenanigans:

http://www.extremetech.com/computing/93504-download-com-wraps-downloads-in-bloatware-lies-about-motivations

It is interesting to compare the trojaned VLC screenshot in that article with the Nmap one I've attached. In that case, the user just clicks "Next step" to have their machine infected. And they wrote "SAFE, TRUSTED, AND SPYWARE FREE" in the trojan-VLC title bar. It is telling that they decided to remove that statement in their newer trojan installer. In fact, if we UPX-unpack the Trojan CNet executable and send it to VirusTotal.com, it is detected as malware by Panda, McAfee, F-Secure, etc:

http://bit.ly/cnet-nmap-vt

According to Download.com's own stats, hundreds of people download the trojan Nmap installer every week! So the first order of business is to notify the community so that nobody else falls for this scheme.

Please help spread the word.

Of course the next step is to go after C|Net until they stop doing this for ALL of the software they distribute. So far, the most they have offered is:

"If you would like to opt out of the Download.com Installer you can submit a request to cnet-installer () cbsinteractive com All opt-out requests are carefully reviewed on a case-by-case basis."

In other words, "we'll violate your trademarks and copyright and squandering your goodwill until you tell us to stop, and then we'll consider your request 'on a case-by-case basis' depending on how much money we make from infecting your users and how scary your legal threat is.

F*ck them! If anyone knows a great copyright attorney in the U.S., please send me the details or ask them to get in touch with me.

Also, shame on Microsoft for paying C|Net to trojan open source software!

Cheers,
Fyodor

10 comments:

Hua Cai said...

louis vuitton,borse louis vuitton,louis vuitton sito ufficiale,louis vuitton outlet
jordan shoes
ghd hair straighteners
ed hardy clothing
ralph lauren uk
louis vuitton outlet
arizona cardinals jerseys
mlb jerseys
tory burch sandals
true religion jeans
chanel 2.55
san antonio spurs jerseys
oakley sunglasses
vans shoes
monster beats
tory burch outlet online
true religion outlet, http://www.truereligionjeansoutlet.com
ralph lauren polo shirts
ghd
swarovski jewelry
lebron james shoes
hogan,hogan outlet,scarpe hogan,hogan sito ufficiale,hogan interactive
lululemon
tory burch outlet
chelsea jersey
ed hardy t-shirts
louis vuitton outlet store
nike roshe
swarovski uk
five fingers shoes
kate spade outlet
barcelona jersey
coach outlet
coach factory outlet
burberry outlet, http://www.burberryoutletonlinestore.com.co
2015820caihuali

Hua Cai said...

moncler coats, http://www.moncler.us.com/
nike roshe, http://www.nikerosherunshoes.co.uk/
fitflop, http://www.fitflop.in.net/
prada handbags, http://www.pradahandbagsoutlet.co.uk/
michael kors factory outlet, http://www.discountuggboots.in.net/
winter jackets, http://www.cybermonday2015.us.com/
nike free 5, http://www.nikefree5.us/
cheap ugg boots, http://www.cheapuggboots.net.co/
wedding dresses, http://www.weddingdressesoutlet.co.uk/
tory burch outlet, http://www.toryburchoutletonline.in.net/
iphone cases, http://www.iphonecases.us.com/
rolex watches uk, http://www.rolexwatches-uk.co.uk/
juicy couture outlet, http://www.juicycoutureoutlet.net/
the north face uk, http://www.thenorthfaces.org.uk/
hermes birkin, http://www.hermesbirkin.org/
coach handbags, http://www.coachhandbagsoutletonline.us.com/
michael kors handbags, http://www.michaelkorshandbags.in.net/
belstaff jackets, http://www.moncleroutletstore.us.com/
barbour coats, http://www.canadagoosecanada.com/
polo ralph lauren, http://www.poloralphlauren.us.org/
michael kors outlet, http://www.michaelkorsoutletusa.net/
cheap oakley sunglasses, http://www.cheapoakleysunglassess.us.com/
lebron james shoes, http://www.lebronjamesshoes.in.net/
cheap wedding dresses, http://www.cheap-weddingdresses.net/
longchamp outlet, http://www.longchampoutlet.name/
20151016caihuali

Minko Chen said...

michael kors outlet online
seattle seahawks
arizona cardinals
cheap nfl jersey
true religion jeans outlet
oakley sunglasses
giuseppe zanotti outlet
indianapolis colts
michael kors handbags
michael kors outlet online
longchamp handbags outlet
nike trainers
tiffany outlet
cheap wedding dresses
nike outlet store
oakley,occhiali oakley,oakley italia,oakley occhiali,oakley sunglasses
denver broncos
ugg boots clearance,ugg australia,uggs on sale,ugg slippers,uggs boots,uggs outlet,ugg boots,ugg,uggs
abercrombie and fitch
beats by dre
1103MINKO

oakleyses said...

oakley sunglasses, polo outlet, nike free, uggs outlet, longchamp outlet, christian louboutin shoes, oakley sunglasses, ray ban sunglasses, christian louboutin uk, burberry handbags, christian louboutin, michael kors outlet, jordan shoes, louis vuitton outlet, replica watches, longchamp outlet, christian louboutin outlet, michael kors outlet online, kate spade outlet, polo ralph lauren outlet online, nike outlet, louis vuitton outlet, uggs on sale, longchamp outlet, ray ban sunglasses, uggs outlet, prada outlet, oakley sunglasses wholesale, oakley sunglasses, burberry outlet, nike air max, nike air max, tory burch outlet, louis vuitton, gucci handbags, ugg boots, michael kors outlet, ray ban sunglasses, michael kors outlet online, louis vuitton, replica watches, chanel handbags, cheap oakley sunglasses, michael kors outlet online, louis vuitton outlet, ugg boots, prada handbags

oakleyses said...

mulberry uk, nike air max, nike air max uk, hollister uk, hogan outlet, abercrombie and fitch uk, nike air force, nike roshe run uk, true religion outlet, nike roshe, lululemon canada, nike blazer pas cher, true religion outlet, polo lacoste, ray ban uk, guess pas cher, michael kors outlet, michael kors, oakley pas cher, nike free uk, true religion jeans, replica handbags, kate spade, sac hermes, new balance, sac longchamp pas cher, longchamp pas cher, north face uk, north face, vans pas cher, true religion outlet, burberry pas cher, jordan pas cher, louboutin pas cher, hollister pas cher, polo ralph lauren, michael kors pas cher, timberland pas cher, nike air max uk, ray ban pas cher, sac vanessa bruno, nike tn, coach outlet store online, coach purses, converse pas cher, air max, coach outlet, nike free run, michael kors, ralph lauren uk

oakleyses said...

iphone 6 cases, instyler, babyliss, ghd hair, herve leger, lululemon, s6 case, iphone 6s cases, asics running shoes, soccer jerseys, nike huaraches, reebok outlet, wedding dresses, oakley, nike roshe run, north face outlet, hollister, nike air max, nfl jerseys, hermes belt, north face outlet, nike trainers uk, mont blanc pens, timberland boots, bottega veneta, mac cosmetics, iphone 5s cases, valentino shoes, jimmy choo outlet, ferragamo shoes, louboutin, abercrombie and fitch, ipad cases, chi flat iron, ralph lauren, p90x workout, longchamp uk, beats by dre, vans outlet, mcm handbags, giuseppe zanotti outlet, iphone 6 plus cases, iphone cases, baseball bats, hollister clothing, new balance shoes, soccer shoes, celine handbags, iphone 6s plus cases, insanity workout

oakleyses said...

karen millen uk, ugg,uggs,uggs canada, converse outlet, barbour, thomas sabo, montre pas cher, wedding dresses, louis vuitton, canada goose jackets, doudoune moncler, pandora charms, ugg uk, hollister, moncler uk, barbour uk, toms shoes, supra shoes, ugg,ugg australia,ugg italia, pandora jewelry, ugg, canada goose outlet, louis vuitton, louis vuitton, marc jacobs, replica watches, vans, canada goose, canada goose outlet, moncler, converse, moncler, juicy couture outlet, hollister, swarovski crystal, moncler outlet, coach outlet, pandora jewelry, doke gabbana, moncler, moncler outlet, canada goose uk, juicy couture outlet, canada goose, ray ban, canada goose outlet, links of london, louis vuitton, canada goose, lancel, pandora uk, louis vuitton, gucci

sfsd said...

coach outlet online
burberry outlet online
michael kors outlet online
ralph lauren outlet online
longchamp outlet online
oakley outlet online
ugg boots sale
ugg boots
coach outlet online
burberry outlet
toms outlet online
north face outlet
chanel outlet online
oakley outlet
coach handbags outlet
michael kors outlet
mcm handbags outlet
gucci handbags outlet
burberry handbags outlet
michael kors outlet
burberry outlet
nike outlet,nike shoes
ralph lauren outlet
ray ban outlet
nike shoes outlet
nike huarache
air max shoes outlet
supra shoes outlet
toms shoes outlet
coach outlet online
coach outlet
michael kors canada
black friday
coach factory outlet
ugg australia
air max,nike air max
coach factory
coach outlet online
michael kors outlet online
coach factory outlet online

Đào Tạo Vua Bếp said...

noi that nha dep
thiet ke nha hang
nha dep 2016
thiet ke showroom
thiet ke shop
thiet ke van phong
thi cong noi that
trang tri noi that
noi that do go
noi that van phong
noi that phong khach
cach nau gio heo gia cay
cach lam banh bong lan
vit nau chao
hoc nau an o dau
vit om sau
man cua

chenlina said...

chenlina20160129
ugg outlet
air force 1
louis vuitton handbags
air jordans
true religion jeans outlet
michael kors outlet
michael kors outlet online
louis vuitton outlet online
oakley vault
canada goose jackets
louis vuitton handbags
ralph lauren outlet
air max 90
ugg sale
ralph lauren uk
jordan 11 concord
ugg outlet
cheap jordans
louis vuitton outlet
cheap oakley sunglasses
official coach factory outlet
fitflops sale clearance
uggs outlet
micheael kors outlet
lebron 13
coach factory outlet
tory burch outlet
mihchael kors outlet online
ugg boots
ugg outlet
chanel handbags
michael kors outlet online
kate spade handbags
ugg boots
true religion jeans sale
nike roshe run women
michael kors outlet
the north face outlet
louis vuitton
louis vuitton handbags
as