Slashdot posts about Sears installing spyware under the guise of the “My SHC Community” service. Instead of an innocuous service, users who agree to install the software get ComScore spyware, including a software proxy capable of tracking every transaction performed on the internet – from web sites visited, to login credentials, to emails.
More information from the CA Community Advisor Security Research Blog, which indicates that the spyware has been found on the sears.com and kmart.com websites.
If you see a pop-up window soliciting participation in “My SHC Community” do not pass go, do not collect $200, close the pop-up. Better yet, avoid doing business – if at all possible – with companies that would attempt to install spyware (especially companies that do so as deceptively as this).