Researchers Counter Massive Onslaught of Fake Torrents

[nsane.forums]

One third of all torrents uploaded to The Pirate Bay point to malware or scams, researchers report. While Pirate Bay moderators are usually quick to remove suspect torrents they can’t prevent millions of people from downloading these fake files. To counter this threat the researchers have published TorrentGuard, a tool that allows users to identify fake torrents. The Pirate Bay and several large public trackers are eager to collaborate with the researchers to optimize and implement the new technology.

With an estimated quarter billion active users per month, BitTorrent is a lucrative target for scammers and malware peddlers.

Every day thousands of “fake” torrents are uploaded from malicious sources, often labeled with the names of popular movies or TV-shows. Needless to say, those who download these torrents don’t get what they were looking for. Instead they are redirected to scam websites or lured into installing malware.

One of the prime platforms where these fake torrents are published is without doubt The Pirate Bay. To measure the scope of this problem and what can be done about it, a group of researchers decided to monitor all Pirate Bay uploads. The just-published results (pdf) are rather surprising.

During a two week period the researchers collected a total of 29,330 torrent files and found that 12,209 were “fake” and eventually removed from The Pirate Bay. Put differently, one in three torrent files uploaded to The Pirate Bay links to malware or scams of some kind.

This result may be surprising to many Pirate Bay users as these fake files rarely stay on the site for long. Moderators tend to delete the torrents in question within minutes or hours, but according to the researchers this is too late for the many people who’ve already started downloading the files.

The researchers estimate that in a year’s time millions of people will be downloading these fake files. Interestingly, people from the US, China and Brazil fall for these scams more than the average downloader. BitTorrent users from Spain, India and Great Britain on the other hand are best at avoiding them.

Fake downloaders

The researchers believe the mass distribution of these fake files poses a serious threat to the security of Internet users, but luckily they’ve also come up with a solution.

In addition to describing and analyzing the fake torrent phenomenon, the researchers have also developed a tool that allows BitTorrent users to check torrents before they’re downloaded. Their TorrentGuard application is available as a Vuze plugin and users can also test torrents via the website.

The researchers are able to accurately identify fake torrents because the vast majority of the files are uploaded by a small group of uploaders. They found that 90% of all fake files were initially seeded by just 20 different IP-addresses. By using the TorrentGuard tool, the researchers estimate that 10 million fake downloads per year can be prevented.

Talking to TorrentFreak, researcher Rubén Cuevas of Universidad Carlos III de Madrid explains that the research is important because it reveals the threat posed by these fake torrents. He hopes that more researchers will take this aspect of cyber-security seriously and that the research presents an opportunity to educate the public.

“Of course skilled users are aware of these risks and are able to identify fake torrents in most cases. However, a large percentage of BitTorrent users are unskilled and not capable of distinguishing between legitimate and fake torrents.”

“We hope that our research is able to make at least a fraction of the unskilled users aware of this threat, so that they become more careful when selecting the torrents to download,” Cuevas says.

Ideally, the research team would like BitTorrent portals and trackers to cooperate.

“In order to make TorrentGuard even more efficient, we would need the collaboration of both BitTorrent portals and BitTorrent trackers,” Cuevas told TorrentFreak.

This would not only make the TorrentGuard tool more effective, it would also prevent even more fake torrents from spreading as BitTorrent sites would be able to detect them earlier.

The Pirate Bay team informed TorrentFreak that they are interested in collaborating, especially if doing so can prevent millions of people from falling for these scams. OpenBitTorrent and PublicBitTorrent, the two largest public BitTorrent trackers, have also indicated that they want to work with the researchers to improve the tool.

If the collaboration leads to a practical solution which is adopted across all popular BitTorrent portals, the researchers predict that 35 million fake downloads can be prevented, making the Internet a safer place for all.

More information on TorrentGuard is available at the official website.

View: Original Article

[Ambrocious]

The reason I no longer upload to TPB is because my "Ambrocious' System & Security Pack" was removed and I was not given ANY reason. They also banned my account. There was NOTHING bad inside them save a few keygens for the programs that I had inside of RAR files. If I have to, I'll download something but I don't trust that they won't screw me over again and so I have stopped sharing on there for THAT very reason. The forever turned me off to sharing on their website. Any fool could have told you that keygens WERE NOT bad, at least not the ones that came with the package that I uploaded.

[GRiM]

The reason I no longer upload to TPB is because my "Ambrocious' System & Security Pack" was removed and I was not given ANY reason. They also banned my account. There was NOTHING bad inside them save a few keygens for the programs that I had inside of RAR files. If I have to, I'll download something but I don't trust that they won't screw me over again and so I have stopped sharing on there for THAT very reason. The forever turned me off to sharing on their website. Any fool could have told you that keygens WERE NOT bad, at least not the ones that came with the package that I uploaded.

lmao @ pirategay

[DKT27]

@Ambrocious: I'm sure someone reported it as virus. There are jerks in there who know how to convince the mods. I've gone through the problem myself. Mods there don't have time to check stuff. Otherwise, TPB never removes torrents by request. Also, there's no problem on fake torrents if you download them from guys like ViPs, Helpers, Trusted, etc. :)

[Ambrocious]

@Ambrocious: I'm sure someone reported it as virus. There are jerks in there who know how to convince the mods. I've gone through the problem myself. Mods there don't have time to check stuff. Otherwise, TPB never removes torrents by request. Also, there's no problem on fake torrents if you download them from guys like ViPs, Helpers, Trusted, etc. :)

My biggest problem is that I was GUILTY before proven innocent. Isn't that the United States governments job to do? I was never responded to when I sent in all 4 emails to some of the mods, not once did I hear back.

[DKT27]

My biggest problem is that I was GUILTY before proven innocent. Isn't that the United States governments job to do? I was never responded to when I sent in all 4 emails to some of the mods, not once did I hear back.

I know. Similar thing happened to me. Everything on TPB happens on IRC and forums. Should have complained there. First IRC, if no good then forums.

However, I still trust TPB. Simple thing, there are big big torrents out there that never get deleted, from movies to wikileaks files, why would they delete yours? It was just a mistake I think. Someone must have showed that it's a virus and made the mods remove it. I know it sucks, but I personally wouldn't be holding any grudge over it.

That doesn't mean I want to upload on TPB though. Maybe in future, if really required.