My new
Who Profits from Security Holes? write-up and video shows a security hole used by a web site to install 16+ unwanted programs on a user's PC, all without notice or consent, including CashBack by Bargain Buddy and WebRebates (both programs known to interfere with affiliate commission tracking).
In the past week, I've also seen Ebates Moe Money Maker installed through security holes.
In my recent testing, CashBack, Ebates, and WebRebates all continue to invoke affiliate links in LS and CJ. But isn't installation through security holes an unusually clear violation of network rules? If so, why don't networks enforce their rules and remove these programs?
Meanwhile, merchants participating in CB, EB, and WR might want to reconsider in light of knowledge of these programs being installed through security holes. I guess the logical next step is for me to prepare a list of merchants participating in these programs.