'Greyware' threat to Middle East computer users

The popularity of the Internet and its rising penetration into schools, homes, and businesses in the Middle East has meant that more and more people feel comfortable downloading material and surfing the net. A rise in "Greyware" - software that downloads onto a system without causing any obvious immediate effect - is one of the unfortunate side effects of this growth.

While several forms of malicious software - most notably viruses and phishing email fraud - have gained worldwide attention, fewer computer users are aware of "Greyware" programs or their potential threat to the integrity of business networks and individual end-users' systems if left unchecked.

According to Justin Doo, managing director, Trend Micro Middle East, the probability is that many computers in the region are already infected by Greyware.

"We are seeing a growth in Greyware infections circulating through the web, and this is a major security issue for home users as well as businesses," Doo warned. "Sensitive data — credit card numbers, passwords, and even a user's identity — can be recorded through these programs, and this could be used for financial or marketing gain. These attacks don't damage systems in the traditional way a virus would, but they can expose a company or individual to information leaks."

Among the types of Greyware on the rise in the region are Adware programs embedded in freeware applications which are used to load pop-up browser advertisements; "Trojan horses" that sit upon systems and can change settings; and dialer applications used to make long distance calls or call premium numbers to generate revenue.

"Greyware for financial benefit has no boundaries. Almost 50 percent of e-mails carry personal data, which can be recorded by Greyware sitting on a desktop. Companies need to look at this threat seriously, and ensure that they are protecting their clients as well as themselves," explained Samir Kirouani, technical manager, Trend Micro Middle East.

"There are a number of steps that computer users can take to ensure system integrity. You can be filtering email traffic at the internet gateway and monitoring where web browser requests are being routed to," said Kirouani.

"Trend Micro has a list of known web addresses that have been used in the past as part of Greyware scams. Internationally, authorities are in the process of introducing legislation to protect customer data, and they will soon start prosecuting businesses that lose customer data through Greyware, which increases the importance of companies investing now," added Kirouani.

In addition, resellers and distributors have a part to play in providing protection, claims Doo, and need to be aware of both the technology and the pending legislation, to provide a full service to consumers and businesses.

"There are opportunities in this field for systems integrators that have the expertise to provide customers with a proper service and help defend them against Greyware. But at the same time, if you are not aware of what the forthcoming legislation requires, then how can you add value when going to your major accounts and selling solutions?"

"This is a constant education process and the channel needs to know what threats users are facing. A few companies have already made the step up and started to market solutions to tackle Greyware, but there need to be more channels offering such a service," concluded Doo.