Subscribe

Beware of the free livestream


Johannesburg, 29 Jul 2016

Is video slowly killing text? This is a question being asked following the recent announcement by Nicola Mendelsohn that in five years' time Facebook "will be definitely mobile, it will be probably all video."

"The best way to tell stories in this world, where so much information is coming at us, actually is video," added Mendelsohn, who heads up Facebook's operations in Europe, the Middle East and Africa. "It conveys so much more information in a much quicker period. So the trend helps us to digest much more information."

Although the adoption of livestreaming and video technology among South Africans is coming of age, it is still based on two factors - content and cost, points out Anton Jacobsz, managing director of value-added distributor, Networks Unlimited. "Livestreaming is changing the way we interact with friends, news, music, sport and so much more - from a social media site or any other Internet site," he says. "However, not all sites are created equal when it comes to their inherent security measures and so, watching something live via your laptop, smartphone or any other connected device also poses security risks."

Jacobsz highlights researchers from the University of KU Leuven in Belgium and Stony Brook University in the US, both of whom used one of their homegrown tools to identify and analyse livestreaming sites, found that there is a 50% chance the so-called "overlay" ads that accompany sites which offer free livestreaming of sporting events, concerts, and so on are malicious.

The research, entitled "It's Free for a Reason: Exploring the Ecosystem of Free Live Streaming Services," analysed more than 23 000 free streaming Web sites across 5 600 domain names, 50% of which ranked within the one million most popular Web sites in the world.

"The ads are often disguised as 'play' buttons, which attempt to fool users into downloading software, often from recognisable brand names in the space, and claim it is necessary to download it in order to play the stream," continues Heidi Bleau, ?principal integrated marketing manager at RSA, The Security Division of EMC, a Networks Unlimited partner in the region.

She explains that the researchers then used their system to revisit these sites 850 000 times, analysing more than a terabyte of traffic. From those visits, they discovered that as many as half of the advertisements presented to users trying assiduously to avoid having to pony up for pricey pay-per-view events were malicious. They exposed viewers to potential risks such as identity and data theft as well as financial scams.

"For those who aren't aware (and even for those who are), many overlay adverts on livestreaming sports, fan, concerts and music downloads sites have fake close buttons or close buttons that move when a mouse hovers over them. As a result of these adverts, many users are unknowingly exposed to malware. Further, clicking on any of these ads can prompt a direct (albeit unintended) download of unwanted software into your browser and PC that may audit and store your keystrokes or even spy on your activities," adds Bleau.

Not surprisingly, say the researchers, a livestream's sponsors are often complicit in these scams.

These livestreaming Web sites are simply another vehicle used by fraudsters to deliver malware. "In addition, great efforts are put in to ensure the design is almost identical to the actual free livestreaming sites, further tricking users into believing that this "new" site is merely an extension of the original one. Not even anti-virus or ad-blocker software extensions are enough to protect consumers, as the malware uploaded onto these sites has been purpose-built to actively try and defeat them.

"Whatever you choose to do, just realise that when you decide to binge on free livestreaming events in order to avoid paying for them, sooner or later you may wind up paying for it in an entirely unexpected way including identity, data or financial theft," warns Bleau.

The writing may be on the wall for the scripted word, but livestreaming certainly brings a whole vocabulary of new terms to a site and calls for greater awareness about security and security measurements.

Share

RSA

RSA provides more than 30 000 customers around the world with the essential security capabilities to protect their most valuable assets from cyber threats. With RSA's award-winning products, organisations effectively detect, investigate, and respond to advanced attacks; confirm and manage identities; and ultimately, reduce IP theft, fraud, and cyber crime. For more information, go to www.rsa.com.

Networks Unlimited

Networks Unlimited is a value-added distributor, offering the best and latest solutions within the converged technology, data centre, networking, and security landscapes. The company distributes best-of-breed products, including Arbor Networks, Aruba Networks, Fortinet, F5, Mellanox, ProLabs, Rackmount, Riverbed, RSA, Rubrik, SimpliVity and Tintri. The product portfolio provides solutions from the edge to the data centre, and addresses key areas such as cloud networking and integration, WAN optimisation, application performance management, application delivery networking, WiFi-, mobile- and networking security, load balancing, data centre in-a-box, and storage for virtual machines.

Since its formation in 1994, Networks Unlimited has continually adapted to today's progressively competitive and evolving marketplace, and has reaped the benefits by being a leading value-added distributor (VAD) within the Sub-Saharan Africa market. Networks Unlimited complies with the South African Broad-Based Black Economic Empowerment (B-BBEE) guidelines as a Level 4 Contributor.

Editorial contacts

Lynne McCarthy
Networks Unlimited
(+27) 011 202 8400
lynne@nu.co.za