Fergie's Tech Blog

Sears.com: Join the Community – Get Spyware

Via The CA Security Advisor Research Blog.

While Christmas shopping online this season, be careful what you are signing up for.

Visiting Sears.com (and Kmart.com) a few weeks ago, I was offered a chance to join My SHC Community, for free, but what I received was, from a privacy perspective, very costly. Sears.com is distributing spyware that tracks all your Internet usage - including banking logins, email, and all other forms of Internet usage - all in the name of "community participation." Every website visitor that joins the Sears community installs software that acts as a proxy to every web transaction made on the compromised computer.

In other words, if you have installed Sears software ("the proxy") on your system, all data transmitted to and from your system will be intercepted. This extreme level of user tracking is done with little and inconspicuous notice about the true nature of the software.

posted by Fergie @ 12/20/2007 09:21:00 AM