session 1: online business models infringing intellectual property … · 2020-06-13 ·...

SPEAKER | CITY | DATE

Session 1:

Online Business Models Infringing

Intellectual Property Rights

Erling Vestergaard, Manila, 24-25 April 2019

Online Business Models Infringing Intellectual Property Framework

Trade mark Registration Fraud

Fake E-shops Marketing Counterfeits

Vendor Accounts Marketing IP Infringements on Darknet Marketplaces

Malware Financing Copyright Piracy

Internet Protocol Television (IPTV) Crime

Index

Online Business Models Infringing Intellectual Property Framework

Trade mark Registration Fraud

Fake E-shops Marketing Counterfeits

Vendor Accounts Marketing IP Infringements on Darknet

Marketplaces

Malware Financing Copyright Piracy

Internet Protocol Television (IPTV) Crime

Index

Online Business Models Infringing Intellectual Property Framework

Phase 1: Online Business Models

Infringing IPR Study, July 2016

Report available here

Online Business Models Infringing Intellectual Property Framework

Trade mark Registration Fraud

Trade mark Registration Fraud

Trade mark Registration Fraud

Trade mark Registration Fraud

Trade mark Registration Fraud

Fake E-shops Marketing Counterfeits

Fake E-shops Marketing Counterfeits

Phase 2: Previously Used Domain

Names Study, October 2017

Report available here

Fake e-shops Marketing Counterfeits

.de 16 million domains

.es 1.8 million domains

.se 1.4 million domains

.uk 10.6 million domains

Fake e-shops Marketing Counterfeits

europaparl.se

Fake e-shops Marketing Counterfeits

europaparl.se

Number of

products: 2288

Fake e-shops Marketing Counterfeits

europaparl.se

Number of

products: 2288

Fake e-shops Marketing Counterfeits

europaparl.se

Number of

products: 2288

Fake e-shops Marketing Counterfeits

europaparl.se

Number of

products: 2288

Fake e-shops Marketing Counterfeits

bandidos-regensburg.de

Fake e-shops Marketing Counterfeits

bandidos-regensburg.de

Number of

products: 4051

Fake e-shops Marketing Counterfeits

bandidos-regensburg.de

Number of

products: 4051

Fake e-shops Marketing Counterfeits

bandidos-regensburg.de

Number of

products: 4051

Fake e-shops Marketing Counterfeits

bandidos-regensburg.de

Number of

products: 4051

Fake e-shops Marketing Counterfeits

london-escorts-agency.co.uk

Fake e-shops Marketing Counterfeits

london-escorts-agency.co.uk

Number of

products: 209

Fake e-shops Marketing Counterfeits

london-escorts-agency.co.uk

Number of

products: 209

Fake e-shops Marketing Counterfeits

london-escorts-agency.co.uk

Number of

products: 209

Fake e-shops Marketing Counterfeits

cancerinfo.es

Fake e-shops Marketing Counterfeits

cancerinfo.es

Number of

products: 2013

Fake e-shops Marketing Counterfeits

cancerinfo.es

Number of

products: 2013

Fake e-shops Marketing Counterfeits

cancerinfo.es

Number of

products: 2013

Domain Names - No prior

use (25%) - Prior use

(75%)

Sales and logistics facilities

Domain Names - No prior

use (25%) - Prior use

(75%)

Sales and logistics facilities

Domain Names - No prior

use (25%) - Prior use

(75%)

Sales and logistics facilities

Domain Names - No prior

use (25%) - Prior use

(75%)

Sales and logistics facilities

A single or very few commercial operators

Domain Names - No prior

use (25%) - Prior use

(75%)

.se registry

Jurisdictional challenges .de registry

.se registry

Jurisdictional challenges .uk registry

.de registry .se registry

Jurisdictional challenges .uk registry

.es registry

.de registry .se registry

Jurisdictional challenges .uk registry

.es registry

Domain name registrar, India

(25% ?)

.de registry .se registry

Jurisdictional challenges .uk registry

.es registry

Domain name registrar, India

(25% ?)

.de registry

Domain name registrar,

Germany (41% ?)

.se registry

Jurisdictional challenges E-shop hosting,

USA (18%)

.uk registry

.es registry

Domain name registrar, India

(25% ?)

.de registry

Domain name registrar,

Germany (41% ?)

.se registry

Jurisdictional challenges E-shop hosting,

USA (18%)

.uk registry

.es registry

Domain name registrar, India

(25% ?)

.de registry

Domain name registrar,

Germany (41% ?)

E-shop hosting, Netherlands

(19%)

.se registry

Jurisdictional challenges

E-shop hosting, Turkey (26%)

E-shop hosting, USA (18%)

.uk registry

.es registry

Domain name registrar, India

(25% ?)

.de registry

Domain name registrar,

Germany (41% ?)

.se registry

E-shop hosting, Netherlands

(19%)

Jurisdictional challenges

Storage and logistics (?)

E-shop hosting, Turkey (26%)

E-shop hosting, USA (18%)

.uk registry

.es registry

Domain name registrar, India

(25% ?)

.de registry

Domain name registrar,

Germany (41% ?)

.se registry

E-shop hosting, Netherlands

(19%)

Jurisdictional challenges

Storage and logistics (?)

E-shop hosting, Turkey (26%)

E-shop hosting, USA (18%)

.uk registry

.es registry

Domain name registrar, India

(25% ?)

.de registry

Domain name registrar,

Germany (41% ?)

Production of non-genuine goods (?)

.se registry

E-shop hosting, Netherlands

(19%)

Jurisdictional challenges Organisation behind the

infringements (?)

Storage and logistics (?)

E-shop hosting, Turkey (26%)

E-shop hosting, USA (18%)

.uk registry

.es registry

Domain name registrar, India

(25% ?)

.de registry

Domain name registrar,

Germany (41% ?)

.se registry

Production of non-genuine goods (?) E-shop hosting,

Netherlands (19%)

Jurisdictional challenges Organisation behind the

infringements (?)

Storage and logistics (?)

E-shop hosting, Turkey (26%)

E-shop hosting, USA (18%)

Delivery of non-genuine

goods

.uk registry

.es registry

Domain name registrar, India

(25% ?)

.de registry

Domain name registrar,

Germany (41% ?)

.se registry

Production of non-genuine goods (?) E-shop hosting,

Netherlands (19%)

Jurisdictional challenges

E-shop hosting, Turkey (26%)

E-shop hosting, USA (18%)

.uk registry

.es registry

Domain name registrar, India

(25% ?)

.de registry

Domain name registrar,

Germany (41% ?)

Organisation behind the

infringements (?)

.se registry

Misuse of identity information in domain name registrations

E-shop hosting, Netherlands

(19%)

Jurisdictional challenges

E-shop hosting, Turkey (26%)

E-shop hosting, USA (18%)

.uk registry

.es registry

Domain name registrar, India

(25% ?)

.de registry

Domain name registrar,

Germany (41% ?)

Organisation behind the

infringements (?)

.se registry

Misuse of credit card

information

E-shop hosting, Netherlands

(19%)

Vendor Accounts Marketing IP Infringements on Darknet Marketplaces

SURFACE WEB - CLEAR WEB (10%)

Search Engine Indexed

Wiki-media

DEEP WEB

Company Databases

Health Records

Government Resources

Social Media

Subscriber Information

Scientific Research

Trade Secrets

DARK WEB Illicit Trade

Misuse of Children

Political Dissent

Anonymized Communication

Vendor Accounts Marketing IP Infringements on Darknet Marketplaces

euipo.europa.eu

Exit Node

Bridge Relay

DARKNET

Encrypted Non-encrypted

Entry Guard

TOR Client

Exit Node

DARKNET

Encrypted

Entry Guard

TOR Client

mkogi8948dkl09483s.onion

Bridge Relay

Bridge Relay

Introduction Point

Rendezvous Point

Directory Server

Vendor Accounts Marketing IP Infringements on Darknet Marketplaces

Vendor Accounts Marketing IP Infringements on Darknet Marketplaces

Probably around 10% of illegal acts on Darknet markets involve

some kind of IP infringement

Mainly

- Trade secrets

- Hacked user accounts to digital content

- Medicines

- Luxury products

- E-books

TOR Hidden Marketplace

Bitcoin Exchange Provider

(escrow)

2% Fee 4-6 % Fee

Malware Financing Copyright Piracy

Malware Financing Copyright Piracy

Identification and Analysis of

Malware on Selected Suspected

Copyright-Infringing Websites

Published 19 October 2018

Report available here

Malware Financing Copyright Piracy

Followed up another study

Digital Advertising on Suspected

Infringing Websites, January 2016

Report available here

Malware Financing Copyright Piracy

Digital display

advertising is a fast

growing sector and

is the main source

of revenue for

suspected

copyright infringing

websites

Malware Financing Copyright Piracy

Malvare (malvertising)

or othervise potentially

unwanted programs

(PUPs) amounted to

51% of advertising on

suspected copyright

infringing websites in

the summer of 2015

Malware Financing Copyright Piracy

91% of malvertising or

PUPs was placed by

10 advertising

intermediaries

Malware Financing Copyright Piracy

With some notable variations

this covered: BitTorrent,

Cyberlockers, Hosting, Linking

and Streaming Websites

Malware Financing Copyright Piracy

The placement of malware is a

dynamic and evolving business

model that now also includes

mobile applications

Malware is a cause of concern

for ordinary internet users,

including users of suspected

copyright infringing websites

Malware Financing Copyright Piracy

Direct Hardware Access

Generic Dynamically-Linked

Libraries (DLL) Load Activity

Network Activity

Process Based Anomaly

Application Crash Activity

Install Activity

Kernel Level Activity

Dynamic Generation Algorith (DGA)

High Repeated Sleep Calls

Keylogging Activity

Generic Anomalous Activity

Rootkit Activity

Adding Certificate Activity (CA)

Process Cloned

Suspicious Directory

Misc Anomaly

Generic Persistence Activity

Malware Financing Copyright Piracy

Malvertising:

Embedding malicious or otherwise unwanted programs within

advertisements

Useful Software Installations:

Fake installer: Simulates the installation of legitimate software, Fake media

player: Simulates software designed to present digital media content such

as films, audio files, etc.

Fake useful software: Simulates functions useful for the user, e.g. s

cleaning up old files, speeding up the computer and removing

unnecessary system files

Malware Financing Copyright Piracy

Advertisement on a video-streaming website that appeared after attempt to download pirated movie

Malware Financing Copyright Piracy

Download prompt

Malware Financing Copyright Piracy

Prompt to register for an account for ‘premium access’ to download a television title

Malware Financing Copyright Piracy

‘Installation’ where title and picture matches a popular videogame

Malware Financing Copyright Piracy

‘Download button’ on a streaming website

Malware Financing Copyright Piracy

Software that offers to fix ‘unknown drivers’ problem

Malware Financing Copyright Piracy

‘Useful’ software installer

Internet Protocol Television (IPTV) Crime

content transcoding

delivery

middleware

content consumer

(forensic) artefacts

THANK YOU

erling.vestergaard@euipo.europa.eu