{"id":92891,"date":"2018-12-03T21:01:48","date_gmt":"2018-12-04T05:01:48","guid":{"rendered":"https:\/\/securingtomorrow.mcafee.com\/?p=92891"},"modified":"2025-08-13T00:26:25","modified_gmt":"2025-08-13T07:26:25","slug":"wakenet-ab-pups-users","status":"publish","type":"post","link":"https:\/\/www.mcafee.com\/blogs\/tips-tricks\/wakenet-ab-pups-users\/","title":{"rendered":"Software Company WakeNet AB Discovered Spreading PUPs to Users"},"content":{"rendered":"

Pay-per-install, or PPI for short, is a type of software program that presents users with third-party offers while they are in the middle of another download. If a user clicks on the third-party advertisement, the software developer earns money from the download. One specific PPI program has caught the attention of our McAfee ATR team<\/a>, as they recently investigated a company that has taken advantage of this software and is using deceptive techniques to spread malicious files. Meet WakeNet AB, a Swedish pay-per-install software developer that has generated a large amount of revenue \u2013 even more so than some of the most prevalent ransomware families \u2013 from spreading PUPs (potentially unwanted programs).<\/p>\n

So, how does WakeNet AB infect users\u2019 devices with PUPs? WakeNet sets up PPI sites to entice affiliate hackers to spread malicious files and adware. WakeNet\u2019s most recent distribution vessel is the site FileCapital. FileCapital provides affiliate hackers with a variety of \u201cmarketing tools\u201d such as embedded movies, landing pages, banners, and buttons. These deceptive tools are intended to coax victims into installing bundled applications that house different PUPs. Victims may install these applications because they are disguised as legitimate programs. For example, a user may think they are installing a helpful performance cleaner onto their computer. What they don\u2019t know is that the \u201cperformance cleaner\u201d is actually disguising other malicious files that could lead to irritating adverts and decreased computer performance.<\/p>\n

Tips to Protect Yourself From This Threat<\/h2>\n

As of now, it seems unlikely that PUP development will slow since it helps their distributors earn a considerable amount of money. With that said, it\u2019s important now more than ever for users to be aware of the security risks involved with PUPs like the ones spread by WakeNet\u2019s FileCapital. Check out the following tips to better protect yourself from this threat:<\/p>\n