cancel
Showing results for 
Search instead for 
Did you mean: 

General Discussions

Antivirus program tracked users' porn habits, sold browsing data

Antivirus program Avast, which is used by hundreds of millions of people, collected and sold users' most secretive browsing data to some of the world's largest companies until 2019.

Once Avast was installed on computers, it collected user browsing data, and its subsidiary Jumpshot then repackaged that data and sold it to companies like Google, Microsoft, Pepsi, Yelp, Trip Advisor, Home Depot and more, according to a joint report by Vice's Motherboard and PCMag, citing leaked Jumpshot documents.

Avast told FOX Business in a statement that it "completely discontinued the practice of using any data from [its] browser extensions for any other purpose that the core security engine, including sharing with ... Jumpshot" in 2019.

"Users have always had the ability to opt-out of sharing data with Jumpshot. ... We are now also prompting our existing free users to make an opt-in or opt-out choice, a process which will be completed in February 2020," the company added.

Some companies pay millions of dollars for access to users' web-browsing activity through software companies like Avast. This user data includes information on which websites people visited and their activity on those sites.

Clients had the ability to see what some anonymized Avast users searched on Google, Google Maps, YouTube, LinkedIn and porn websites. In some cases, clients could see what keywords users searched and videos users watched on explicit sites like YouPorn and Pornhub, the report shows.

 

Avast has 435 million customers who use its antivirus software, according to its website, and Jumpshot collects data from about 100 million devices worldwide, a 2018 Marketing Land report shows.

"In 2018, as part of a request for information by antitrust authorities, Yelp's policy team was asked to estimate the impact of Google’s anticompetitive behavior on the local search marketplace. Jumpshot was engaged on a one-time basis to generate a report of anonymized, high-level trend data, which validated other estimates of Google’s siphoning of traffic from the web," a Yelp spokesperson told Motherboard and PCMag.

A Home Depot spokesperson said the hardware store will "sometimes use information from third-party providers to help improve our business, products and services. We require these providers to have the appropriate rights to share this information with us. In this case, we receive anonymized audience data, which cannot be used to identify individual customers."

 

Microsoft told the outlets it no longer works with Jumpshot.

But even though Avast users are anonymized when the program sells their data, their browsing information is sometimes so specific that it can reveal identities, experts said.

"It's very granular, and it's great data for these companies because it's down to the device level with a timestamp," one source told Motherboard and PCMag of the specificity and sensitivity of this data being sold.

Avast said in its statement that the antivirus company ensures that "Jumpshot does not acquire personal identification information, including name, email address or contact details, from people using our popular free antivirus software."

 

Avast added in its statement that its "Privacy Policy details the protections we put in place" for all of its users.

"Users can also choose to adjust their privacy levels using the broad range of settings available in our products, including control over any data sharing at any time. We voluntarily comply with the GDPR and California Consumer Privacy Act (CCPA) privacy requirements across our entire global user base," the statement said.

 

"We have a long track record of protecting users’ devices and data against malware, and we understand and take seriously the responsibility to balance user privacy with the necessary use of data for our core security products," the company added.

Antivirus program tracked users' porn habits, sold browsing data 

15 Replies

this is a pervasive problem and probably litigation would be viable too, especially in california

0 Likes

Thanks for the share! While not surprising this invasion of privacy is disgusting and a problem I don't see going away. One thing I will say as an IT Manager is that I have zero issues using Windows Defender and not using 3rd party software. Then I use O&O Shutup to easily change the MANY registry settings that MS uses to collect data. The are no angels either. The best thing you can do is to assume any software is spying on you and to look through settings, preferences etc. for ways to OPT OUT of this collect. IMHO it should be international law that you should have to OPT IN to this collection not out. Unfortunately it is not that way. 

0 Likes

pokester wrote:

Thanks for the share! While not surprising this invasion of privacy is disgusting and a problem I don't see going away. One thing I will say as an IT Manager is that I have zero issues using Windows Defender and not using 3rd party software. Then I use O&O Shutup to easily change the MANY registry settings that MS uses to collect data. The are no angels either. The best thing you can do is to assume any software is spying on you and to look through settings, preferences etc. for ways to OPT OUT of this collect. IMHO it should be international law that you should have to OPT IN to this collection not out. Unfortunately it is not that way. 

Windows Defender is not nearly as bad as some would say. I still use Malwarebytes for a second opinion.

0 Likes

You can even save yourself from running the paid version of Malwarebytes Premium. Run their anti-exploit and anti-ransomware and they are the active scanners as in their paid product just newer beta versions. Major Geeks or Bleeping Computer are great sites to get them safely. 

0 Likes

This is the free version worth having....browser guard

Browser Guard - Blocks ads, scams, and trackers | Malwarebytes 

0 Likes

I use Ublock Origin. I like it as it supports pretty much every filter list our there and I enable them all. Glad though that you brought this up as IMHO a good content blocker is far more effective these days against infection. Preventative is the key. I am not saying I don't like this product either as I have not tried it. Thanks for the tip I will look into it. 

0 Likes

Is anybody surprised that Avast is a total scam? Look what they did to Crap Cleaner when they acquired it. If you are using the newer versions (after Avast got hold of it) they are spying on you.

0 Likes

Worth mentioning again that since Windows 10 launched, Microsoft has improved Windows Defender's effectiveness so it matches paid programs.

Windows Defender (Windows 10) Top Ranked By AV Test

black_zion wrote:

Worth mentioning again that since Windows 10 launched, Microsoft has improved Windows Defender's effectiveness so it matches paid programs.

 

Windows Defender (Windows 10) Top Ranked By AV Test

Google's Chrome has also stepped up with security for their users

0 Likes

Yet sites like PCMAG continue to bash the software and say you should use paid versions. Wow it's like they are promoting their advertisers. You are right though for years now in the independent labs testing Defender has been as good as any of them. In reality you don't have much to worry about unless you are going to nefarious sites and downloading things you should not. For the most part it's really about just paying attention and not falling for the scam popups and fake sites. Now one thing that does drive me nuts though are so many of the download sites that package their downloads with malware like open candy and such. I pretty much only download from Bleeping Computer or Major Geeks these days. Never an issue with those sites. 

0 Likes

kingfish wrote:

Is anybody surprised that Avast is a total scam? Look what they did to Crap Cleaner when they acquired it. If you are using the newer versions (after Avast got hold of it) they are spying on you.

Given the revelations about the company I have to question the real motives. Look at the headaches Kasperski had to endure.

0 Likes

Avast announced today they're shutting down Jumpshot. Do note how they're trying to make people feel angry that they are doing this by stating:

https://www.tomshardware.com/news/avast-jumpshot-selling-user-data-scaled-back

Hundreds of employees.....and dozens of customers lol

And as the article says...its customers were/are "Google, Microsoft, Linkedin,et al.

0 Likes

No kidding and those dozen customers become millions and millions.

0 Likes