Understanding the Business Ofonline Pharmaceutical Affiliate Programs

Total Page:16

File Type:pdf, Size:1020Kb

Understanding the Business Ofonline Pharmaceutical Affiliate Programs PharmaLeaks: Understanding the Business of Online Pharmaceutical Affiliate Programs Damon McCoy Andreas Pitsillidis∗ Grant Jordan∗ Nicholas Weaver∗† Christian Kreibich∗† Brian Krebs‡ Geoffrey M. Voelker∗ Stefan Savage∗ Kirill Levchenko∗ Department of Computer Science ∗Department of Computer Science and Engineering George Mason University University of California, San Diego †International Computer Science Institute ‡KrebsOnSecurity.com Berkeley, CA Abstract driven by competition between criminal organizations), a broad corpus of ground truth data has become avail- Online sales of counterfeit or unauthorized products able. In particular, in this paper we analyze the content drive a robust underground advertising industry that in- and implications of low-level databases and transactional cludes email spam, “black hat” search engine optimiza- metadata describing years of activity at the GlavMed, tion, forum abuse and so on. Virtually everyone has en- SpamIt and RX-Promotion pharmaceutical affiliate pro- countered enticements to purchase drugs, prescription- grams. By examining hundreds of thousands of orders, free, from an online “Canadian Pharmacy.” However, comprising a settled revenue totaling over US$170M, even though such sites are clearly economically moti- we are able to provide comprehensive documentation on vated, the shape of the underlying business enterprise three key aspects of underground advertising activity: is not well understood precisely because it is “under- Customers. We provide detailed analysis on the con- ground.” In this paper we exploit a rare opportunity to sumer demand for Internet-advertised counterfeit phar- view three such organizations—the GlavMed, SpamIt maceuticals, covering customer demographics, product and RX-Promotion pharmaceutical affiliate programs— selection (including an examination of drug abuse as a from the inside. Using “ground truth” data sets includ- driver), reorder rates and market saturation. ing four years of raw transaction logs covering over $170 Advertisers. We quantitatively detail the role of third- million in sales, we provide an in-depth empirical anal- party affiliate advertisers (both email/forum spammers ysis of worldwide consumer demand, the key role of in- and SEO-based advertisers), the dynamics of their labor dependent third-party advertisers, and a detailed cost ac- market, their ability to drive revenue and the distribution counting of the overall business model. of their commission income. This analysis includes the 1 Introduction operators of many of the best-known botnets including MegaD, Grum, Rustock and Storm, and we document in- Much like the legitimate Internet economy, advertising dividual advertisers generating over $10M in sales. is a major driver for the “underground” criminal econ- Sponsors. We derive an empirical revenue and cost omy as well. For all their variety, spam, search-engine model, including both direct costs (sales commissions, abuse, forum spam and social spam—as well as the bot- supply, payment processing) and indirect costs (hosting, nets, fast-flux networks and other technical infrastruc- domain registration, program advertisements). We also ture that enable these activities—are all simply low-cost provide insight and validation about the most significant advertising platforms that monetize latent consumer de- overheads for the operators of such programs. mand. Consequently, an emerging research agenda has This is an unusual research paper. We introduce no developed around understanding the economic structure new artifact, we develop no new inference technique, of these businesses, both to understand the scope and we deploy no new measurement infrastructure. We do drivers for the problem [8,9, 13], as well as to help pri- none of these things because we don’t need to; we oritize interventions [14, 15]. Unfortunately, while clever have the actual data sets that we would otherwise try inference and estimation techniques can illuminate a few to measure, infer or estimate. Thus, while there are sig- of the key questions, much remains unclear. This is be- nificant methodological challenges that we must over- cause, as a rule, there is little “ground truth” data in the come (mainly around the forensic reverse engineering field for either validating such results or to provide finer- of database schemas and their semantics), ultimately the grained analytics that can be obtained via inference. contribution of this paper is in its results. However, we This paper provides a rare counter-point to this rule. believe these are both unique and significant, with impli- Under a variety of serendipitous circumstances (largely cations for best addressing this variety of Internet abuse. 1 2 Background wail, Storm, Waledac and others). The second advantage Abusive Internet advertising has existed virtually as long of this model, mobility, is that the loosely coupled nature as the Internet itself. In addition to well-defined adver- of their relationship with affiliate programs allows an ad- tising channels such as sponsored search [11, 12], rogue vertiser to switch programs at will (or even support mul- advertisers make use of a broad range of vectors to at- tiple programs at once). This low “switching cost” pro- tract customer traffic including email spam [1,6, 14, 17], vides bargaining power for the effective advertiser (in- search engine manipulation [7, 13, 23], forums and blog deed, we witness high-sales advertisers able to use this spam [19, 24] as well as online social networks [4, 22]. threat to drive higher commissions). More importantly, Due to pressure against these tactics, few legitimate mer- it reduces an advertiser’s exposure to business continuity chants will engage such advertisers and thus rogue adver- risk. If a particular affiliate program should shut down, tising and rogue products tend to go hand in hand. For advertisers can still monetize their investments (e.g., in a example, in one recent report on email spam, Syman- botnet) by advertising for a different sponsor. tec estimated that 80% of all such messages shilled for However, the benefits of this separation are strong for “prescription-free” pharmaceuticals [21]. the sponsoring affiliate program as well. By outsourcing However, the structure of this activity has changed sig- advertising they free themselves from direct exposure to nificantly over the last decade. In particular, market spe- the criminal risks associated with large-scale advertising cialization has largely eliminated the independent “soup- enterprises (e.g., mass compromise of computers and on- to-nuts” advertiser who previously handled the entirety line accounts). Second, because advertisers are paid on a of the sale process [16]. Instead the rise of the affil- commission basis, they also outsource “innovation risk”. iate program, or “partnerka”, model has separated the Program sponsors need not predict the best way to at- role of the advertiser, paid on commission to attract cus- tract customer traffic at a given point in time. Instead tomer traffic, from the sponsor who in turn handles Web hundreds of advertisers innovate independently; if many site design, payment processing, customer service and of them fail, so be it. Since advertisers are only paid com- fulfillment [18]. This evolution is not unique to abu- missions on successful sales, a sponsor will only end up sive advertising; indeed, large legitimate merchants such paying for effective advertising strategies and need not as Amazon also sponsor affiliate programs as a means distinguish among strategies a priori. of advertising. However, it has been deeply internalized Against this background, online pharmaceutical sales within the underground ecosystem including the pay-per- is one of the oldest and largest affiliate program markets. install [3], FakeAV [20], pornography [25], pharmaceuti- This market supports tens of affiliate programs and, as cals [2], herbal supplements [14], replica [14] and coun- we will see, thousands of independent advertisers (affili- terfeit software markets [9], among others. ates) and hundreds of thousands of customers. However, Counterfeit pharmaceuticals represent a typical ex- while the mechanics of this business model are well- ample. Here a range of sponsoring affiliate programs described in recent work [2, 14, 18], the dynamics of provide drugstore storefronts, drug fulfillment (typically the actors and the underlying constants that define the via drop shipping from India), payment processing, cus- cost structure (and hence the vulnerabilities in the busi- tomer service and so on. Independent advertisers, or af- ness) are not well understood at all. Indeed, even simple filiates, in turn promote the program (e.g., by using bot- questions such as “How big is sales turnover?” are imper- nets to send spam email or manipulating search engine fectly understood. For example, Kanich et al. used one results) and are paid a commission on each sale that re- method to estimate that the combined turnover across sults from a click on one of their ads. Commissions range seven leading pharmacy programs (constituting two- from 30%–40% of gross revenue, typically paid via a thirds of affiliate brands advertised in spam) is roughly quasi-anonymous online money transfer service such as 86,000 orders per month [9]. However, Leontiadis et al. WebMoney or Liberty Reserve. use a different technique to arrive at a much larger esti- This business model has two key advantages for the mate suggesting over 640,000 orders per month [13]. advertiser: focus and mobility.
Recommended publications
  • Address Munging: the Practice of Disguising, Or Munging, an E-Mail Address to Prevent It Being Automatically Collected and Used
    Address Munging: the practice of disguising, or munging, an e-mail address to prevent it being automatically collected and used as a target for people and organizations that send unsolicited bulk e-mail address. Adware: or advertising-supported software is any software package which automatically plays, displays, or downloads advertising material to a computer after the software is installed on it or while the application is being used. Some types of adware are also spyware and can be classified as privacy-invasive software. Adware is software designed to force pre-chosen ads to display on your system. Some adware is designed to be malicious and will pop up ads with such speed and frequency that they seem to be taking over everything, slowing down your system and tying up all of your system resources. When adware is coupled with spyware, it can be a frustrating ride, to say the least. Backdoor: in a computer system (or cryptosystem or algorithm) is a method of bypassing normal authentication, securing remote access to a computer, obtaining access to plaintext, and so on, while attempting to remain undetected. The backdoor may take the form of an installed program (e.g., Back Orifice), or could be a modification to an existing program or hardware device. A back door is a point of entry that circumvents normal security and can be used by a cracker to access a network or computer system. Usually back doors are created by system developers as shortcuts to speed access through security during the development stage and then are overlooked and never properly removed during final implementation.
    [Show full text]
  • Adversarial Web Search by Carlos Castillo and Brian D
    Foundations and TrendsR in Information Retrieval Vol. 4, No. 5 (2010) 377–486 c 2011 C. Castillo and B. D. Davison DOI: 10.1561/1500000021 Adversarial Web Search By Carlos Castillo and Brian D. Davison Contents 1 Introduction 379 1.1 Search Engine Spam 380 1.2 Activists, Marketers, Optimizers, and Spammers 381 1.3 The Battleground for Search Engine Rankings 383 1.4 Previous Surveys and Taxonomies 384 1.5 This Survey 385 2 Overview of Search Engine Spam Detection 387 2.1 Editorial Assessment of Spam 387 2.2 Feature Extraction 390 2.3 Learning Schemes 394 2.4 Evaluation 397 2.5 Conclusions 400 3 Dealing with Content Spam and Plagiarized Content 401 3.1 Background 402 3.2 Types of Content Spamming 405 3.3 Content Spam Detection Methods 405 3.4 Malicious Mirroring and Near-Duplicates 408 3.5 Cloaking and Redirection 409 3.6 E-mail Spam Detection 413 3.7 Conclusions 413 4 Curbing Nepotistic Linking 415 4.1 Link-Based Ranking 416 4.2 Link Bombs 418 4.3 Link Farms 419 4.4 Link Farm Detection 421 4.5 Beyond Detection 424 4.6 Combining Links and Text 426 4.7 Conclusions 429 5 Propagating Trust and Distrust 430 5.1 Trust as a Directed Graph 430 5.2 Positive and Negative Trust 432 5.3 Propagating Trust: TrustRank and Variants 433 5.4 Propagating Distrust: BadRank and Variants 434 5.5 Considering In-Links as well as Out-Links 436 5.6 Considering Authorship as well as Contents 436 5.7 Propagating Trust in Other Settings 437 5.8 Utilizing Trust 438 5.9 Conclusions 438 6 Detecting Spam in Usage Data 439 6.1 Usage Analysis for Ranking 440 6.2 Spamming Usage Signals 441 6.3 Usage Analysis to Detect Spam 444 6.4 Conclusions 446 7 Fighting Spam in User-Generated Content 447 7.1 User-Generated Content Platforms 448 7.2 Splogs 449 7.3 Publicly-Writable Pages 451 7.4 Social Networks and Social Media Sites 455 7.5 Conclusions 459 8 Discussion 460 8.1 The (Ongoing) Struggle Between Search Engines and Spammers 460 8.2 Outlook 463 8.3 Research Resources 464 8.4 Conclusions 467 Acknowledgments 468 References 469 Foundations and TrendsR in Information Retrieval Vol.
    [Show full text]
  • Zerohack Zer0pwn Youranonnews Yevgeniy Anikin Yes Men
    Zerohack Zer0Pwn YourAnonNews Yevgeniy Anikin Yes Men YamaTough Xtreme x-Leader xenu xen0nymous www.oem.com.mx www.nytimes.com/pages/world/asia/index.html www.informador.com.mx www.futuregov.asia www.cronica.com.mx www.asiapacificsecuritymagazine.com Worm Wolfy Withdrawal* WillyFoReal Wikileaks IRC 88.80.16.13/9999 IRC Channel WikiLeaks WiiSpellWhy whitekidney Wells Fargo weed WallRoad w0rmware Vulnerability Vladislav Khorokhorin Visa Inc. Virus Virgin Islands "Viewpointe Archive Services, LLC" Versability Verizon Venezuela Vegas Vatican City USB US Trust US Bankcorp Uruguay Uran0n unusedcrayon United Kingdom UnicormCr3w unfittoprint unelected.org UndisclosedAnon Ukraine UGNazi ua_musti_1905 U.S. Bankcorp TYLER Turkey trosec113 Trojan Horse Trojan Trivette TriCk Tribalzer0 Transnistria transaction Traitor traffic court Tradecraft Trade Secrets "Total System Services, Inc." Topiary Top Secret Tom Stracener TibitXimer Thumb Drive Thomson Reuters TheWikiBoat thepeoplescause the_infecti0n The Unknowns The UnderTaker The Syrian electronic army The Jokerhack Thailand ThaCosmo th3j35t3r testeux1 TEST Telecomix TehWongZ Teddy Bigglesworth TeaMp0isoN TeamHav0k Team Ghost Shell Team Digi7al tdl4 taxes TARP tango down Tampa Tammy Shapiro Taiwan Tabu T0x1c t0wN T.A.R.P. Syrian Electronic Army syndiv Symantec Corporation Switzerland Swingers Club SWIFT Sweden Swan SwaggSec Swagg Security "SunGard Data Systems, Inc." Stuxnet Stringer Streamroller Stole* Sterlok SteelAnne st0rm SQLi Spyware Spying Spydevilz Spy Camera Sposed Spook Spoofing Splendide
    [Show full text]
  • Battling the Internet Water Army: Detection of Hidden Paid Posters
    Battling the Internet Water Army: Detection of Hidden Paid Posters Cheng Chen Kui Wu Venkatesh Srinivasan Xudong Zhang Dept. of Computer Science Dept. of Computer Science Dept. of Computer Science Dept. of Computer Science University of Victoria University of Victoria University of Victoria Peking University Victoria, BC, Canada Victoria, BC, Canada Victoria, BC, Canada Beijing, China Abstract—We initiate a systematic study to help distinguish on different online communities and websites. Companies are a special group of online users, called hidden paid posters, or always interested in effective strategies to attract public atten- termed “Internet water army” in China, from the legitimate tion towards their products. The idea of online paid posters ones. On the Internet, the paid posters represent a new type of online job opportunity. They get paid for posting comments is similar to word-of-mouth advertisement. If a company hires and new threads or articles on different online communities enough online users, it would be able to create hot and trending and websites for some hidden purposes, e.g., to influence the topics designed to gain popularity. Furthermore, the articles opinion of other people towards certain social events or business or comments from a group of paid posters are also likely markets. Though an interesting strategy in business marketing, to capture the attention of common users and influence their paid posters may create a significant negative effect on the online communities, since the information from paid posters is usually decision. In this way, online paid posters present a powerful not trustworthy. When two competitive companies hire paid and efficient strategy for companies.
    [Show full text]
  • The History of Digital Spam
    The History of Digital Spam Emilio Ferrara University of Southern California Information Sciences Institute Marina Del Rey, CA [email protected] ACM Reference Format: This broad definition will allow me to track, in an inclusive Emilio Ferrara. 2019. The History of Digital Spam. In Communications of manner, the evolution of digital spam across its most popular appli- the ACM, August 2019, Vol. 62 No. 8, Pages 82-91. ACM, New York, NY, USA, cations, starting from spam emails to modern-days spam. For each 9 pages. https://doi.org/10.1145/3299768 highlighted application domain, I will dive deep to understand the nuances of different digital spam strategies, including their intents Spam!: that’s what Lorrie Faith Cranor and Brian LaMacchia ex- and catalysts and, from a technical standpoint, how they are carried claimed in the title of a popular call-to-action article that appeared out and how they can be detected. twenty years ago on Communications of the ACM [10]. And yet, Wikipedia provides an extensive list of domains of application: despite the tremendous efforts of the research community over the last two decades to mitigate this problem, the sense of urgency ``While the most widely recognized form of spam is email spam, the term is applied to similar abuses in other media: instant remains unchanged, as emerging technologies have brought new messaging spam, Usenet newsgroup spam, Web search engine spam, dangerous forms of digital spam under the spotlight. Furthermore, spam in blogs, wiki spam, online classified ads spam, mobile when spam is carried out with the intent to deceive or influence phone messaging spam, Internet forum spam, junk fax at scale, it can alter the very fabric of society and our behavior.
    [Show full text]
  • Gbruen Knujon Mitspamconf2
    The Future of Anti-Spam: A Blueprint for New Internet Abuse Tools Garth Bruen, CEO Knujon.com LLC [email protected] Process and Document Map Abstract I. Introduction II. Failures and Limitations III. KnujOn Principles IV. Data Collection = Consumer Enfranchisement V. Sort, Categorize, Analyze VI. Redefining the Scope VII. Addressing the Support Structure VIII. Fixing Policy and Technology IX. Use the Law When Called For X. Brand Protection XI. The Daily Tally XII. Non-URL Successes XIII. Conclusion: What is Needed Next (Map of the Process and the Document) Abstract: It is this author’s contention that the efforts, technology, funding, and even critical thought in anti-spam development have been incorrectly focused on the email itself. In essence, the Internet security community has been “looking through the wrong end of the telescope.” Resources poured into larger and larger filtering engines and algorithms have failed to reduce the volume and flow of unsolicited email. In fact, spam volumes have generally increased since filtering was declared the de facto solution. The problem is not really about flaws in SMTP (simple mail transfer protocol), or email clients, or even email security in general. Nor is the problem solely attributed to botnets and malware. Garth Bruen and Dr. Robert Bruen have developed a solution that is based on mass abuse data collection, data analysis, policy enforcement, public reporting, and infrastructure enhancement. The ultimate key to solving the spam problem is about blocking transactions, stopping the flow of money to criminals who hire spammers to market their illicit products. Doing this through the existing, but enhanced, policy structure addresses the issue without exaggerated costs or reinventing the Internet.
    [Show full text]
  • Image Spam Detection: Problem and Existing Solution
    International Research Journal of Engineering and Technology (IRJET) e-ISSN: 2395-0056 Volume: 06 Issue: 02 | Feb 2019 www.irjet.net p-ISSN: 2395-0072 Image Spam Detection: Problem and Existing Solution Anis Ismail1, Shadi Khawandi2, Firas Abdallah3 1,2,3Faculty of Technology, Lebanese University, Lebanon ----------------------------------------------------------------------***--------------------------------------------------------------------- Abstract - Today very important means of communication messaging spam, Internet forum spam, junk fax is the e-mail that allows people all over the world to transmissions, and file sharing network spam [1]. People communicate, share data, and perform business. Yet there is who create electronic spam are called spammers [2]. nothing worse than an inbox full of spam; i.e., information The generally accepted version for source of spam is that it crafted to be delivered to a large number of recipients against their wishes. In this paper, we present a numerous anti-spam comes from the Monty Python song, "Spam spam spam spam, methods and solutions that have been proposed and deployed, spam spam spam spam, lovely spam, wonderful spam…" Like but they are not effective because most mail servers rely on the song, spam is an endless repetition of worthless text. blacklists and rules engine leaving a big part on the user to Another thought maintains that it comes from the computer identify the spam, while others rely on filters that might carry group lab at the University of Southern California who gave high false positive rate. it the name because it has many of the same characteristics as the lunchmeat Spam that is nobody wants it or ever asks Key Words: E-mail, Spam, anti-spam, mail server, filter.
    [Show full text]
  • Programming Languages Topic of Ultimate Mastery
    InternetInternet SecuritySecurity #1 PL Fencing Day • Wed Apr 27 (unless it rains) @ 3:30pm • Darden Courtyard; no experience necessary • I provide gear • I provide lesson #2 Final Projects Due Mon May 7 • The “automated testing” is a favor, not a necessity – PS5/7 is still due even if it is down (email me) #3 One-Slide Summary • Physical security and operating system security are of critical importance and must be understood. • Key issues in internet security, including buffer overruns, virus detection, spam filtering, SQL code-injection attacks, and cross-site scripting can all be understood in terms of lexing and parsing. #4 Lecture Outline • Physical Security • Operating System Security – Privileges • Viruses and Scanning • Side Channel and Non-Control Data Attacks • Spam and Filtering • SQL Injection Attacks #6 Physical Security • It is generally accepted that anyone with physical access to a machine (i.e., anyone who can open the case) can compromise that entire machine. • Given physical access ... – How would I read your personal files? – How would I leave a backdoor (rootkit) for myself? – How would I log in as you? • Ignore networked/encrypted filesystems for now ... #7 • Them: Important user, NT box, lost admin password, sad, sad, sad. • Me: No problem, change password with magic linux disk, offline NT password editor. • Them: No, no, no. Never work. NT secure. Get real. • Me: Watch. (reboot) • Them: Gasp! This floppy is dangerous! Where did you get it? • Me: Internet. Been around forever. • Them: How do we keep students from using this? • Me: Can't. Migrate. Linux. Mac. • Them: No, no, no. Just make NT safe.
    [Show full text]
  • Internet Security
    In the News Articles in the news from the past month • “Security shockers: 75% of US bank websites Internet Security have flaws” • “Blank robbers swipe 3,000 ‘fraud-proof’ UK passports” • “Korean load sharks feed on hacked data” • “Worms spread via spam on Facebook and Nan Niu ([email protected]) MySpace” CSC309 -- Fall 2008 • “Beloved websites riddled with crimeware” • “Google gives GMail always-on encryption” http://www.theregister.co.uk 2 New Targets of 2007 Scenario 1 • Cyber criminals and cyber spies have • The Chief Information Security Officer shifted their focus again of a medium sized, but sensitive, federal – Facing real improvements in system and agency learned that his computer was network security sending data to computers in China. • The attackers now have two new targets • He had been the victim of a new type of spear phishing attack highlighted in this – users who are easily misled year’s Top 20. – custom-built applications • Once they got inside, the attackers had • Next, 4 exploits scenarios… freedom of action to use his personal • Reported by SANS (SysAdmin, Audit, Network, computer as a tunnel into his agency’s Security), http://www.sans.org systems. 3 4 Scenario 2 Scenario 3 • Hundreds of senior federal officials and business • A hospital’s website was compromised executives visited a political think-tank website that had been infected and caused their computers to because a Web developer made a become zombies. programming error. • Keystroke loggers, placed on their computers by the • Sensitive patient records were taken. criminals (or nation-state), captured their user names and passwords when their stock trading accounts and • When the criminals proved they had the their employers computers, and sent the data to data, the hospital had to choose between computers in different countries.
    [Show full text]
  • Index Images Download 2006 News Crack Serial Warez Full 12 Contact
    index images download 2006 news crack serial warez full 12 contact about search spacer privacy 11 logo blog new 10 cgi-bin faq rss home img default 2005 products sitemap archives 1 09 links 01 08 06 2 07 login articles support 05 keygen article 04 03 help events archive 02 register en forum software downloads 3 security 13 category 4 content 14 main 15 press media templates services icons resources info profile 16 2004 18 docs contactus files features html 20 21 5 22 page 6 misc 19 partners 24 terms 2007 23 17 i 27 top 26 9 legal 30 banners xml 29 28 7 tools projects 25 0 user feed themes linux forums jobs business 8 video email books banner reviews view graphics research feedback pdf print ads modules 2003 company blank pub games copyright common site comments people aboutus product sports logos buttons english story image uploads 31 subscribe blogs atom gallery newsletter stats careers music pages publications technology calendar stories photos papers community data history arrow submit www s web library wiki header education go internet b in advertise spam a nav mail users Images members topics disclaimer store clear feeds c awards 2002 Default general pics dir signup solutions map News public doc de weblog index2 shop contacts fr homepage travel button pixel list viewtopic documents overview tips adclick contact_us movies wp-content catalog us p staff hardware wireless global screenshots apps online version directory mobile other advertising tech welcome admin t policy faqs link 2001 training releases space member static join health
    [Show full text]
  • Counterfeit Medicines and Criminal Organisations
    Study report COUNTERFEIT MEDICINES AND CRIMINAL ORGANISATIONS - All rights reserved to IRACM - 2 Eric Przyswa, Research Fellow Mines ParisTech in the Centre for Research on Risks and Crises, wrote this report under the leadership and initiative of the Institute of Research against Counterfeit Medicines (IRACM). The author writes in many French and foreign academic reviews (Hermès, Futuribles, Tribune de la santé, Information and Society, etc.) and conducts research on the human safety. The report is available in its entirety on: www.iracm.com. Institut de Recherche Anti-Contrefaçon de Médicaments 54 avenue Hoche 75008 Paris - France [email protected] IRACM – September 2013 - All rights reserved to IRACM - 3 - All rights reserved to IRACM - 4 COUNTERFEIT MEDICINES AND CRIMINAL ORGANIZATIONS IRACM and Eric Przyswa - All rights reserved to IRACM - 5 Table of contents Foreword __________________________________________________________________________ 9 Introduction _______________________________________________________________________ 11 I. Medicine counterfeiting, criminal organisations and cybercrime __________________________ 13 I.1. Counterfeiting, falsification and medicines ___________________________________________ 13 I.2. State of play __________________________________________________________________ 16 In light of this assessment of counterfeit medicines, how can a more specific analysis be made of the criminal organisations involved in this ever-growing illicit trafficking? __________________________ 23 I.3. Criminal organisations
    [Show full text]
  • 00079-141173.Pdf (5.08
    CHRIS JAY HOOFNAGLE Adjunct Full Professor School of Information School of Law Faculty Director Berkeley Center for Law & Technology August 22, 2017 University of California, Berkeley VIA THE WEB Berkeley, CA Tel: 5 Federal Trade Commission https://hoofnagle.berkeley.edu Office of the Secretary 600 Pennsylvania Avenue NW. Suite CC–5610 (Annex B) Washington, DC 20580 Re: Comment of Chris Hoofnagle on Controlling the Assault of Non-Solicited Pornography and Marketing Act (CAN–SPAM Rule, 16 CFR part 316, Project No. R711010) Dear Mr. Brown, Thank you for soliciting public comment on the CAN–SPAM Rule. My comments below focus on the need for the CAN–SPAM Rule, the costs that spam imposes on consumers and the economy, the prospect that technical interventions on intermediaries can be effective, that spam senders strategically use transaction costs to deter recipients from opting out, that senders impose privacy penalties on those who opt out, for the FTC to consider third-party lookups for email addresses to be an aggravated violation of CAN–SPAM, to revisit that the idea of a Do-Not-Email Registry, and finally, to keep the computer science literature on spam in focus. There is a Continuing Need for the CAN–SPAM Rule Because the Injuries Caused by Spam Are Economic and Social and Are on Par with Serious Crimes In a 2001 speech, FTC Chairman Timothy Muris identified spam messages as injurious under the Commission’s “harm-based” approach.1 Today, the majority of e-mail is spam. Senders of marketing e- mails can leverage the technical and economic properties of the internet to send tens of billions of messages a day.
    [Show full text]