ET MALWARE Fun Web Products Spyware User-Agent (FunWebProducts)

Description:

See the following:

• http://www.networkworld.com/article/2329380/software/no-fun-with-funwebproducts.html
• http://funwebproducts.com/
• https://blog.sucuri.net/2015/08/funwebproducts-useragent-bloating-traffic.html

False Positive:

• PROBABLY NOT
• FunWebProducts is a real company peddling junkware/spyware.  However, see the sucuri blog post and some of the comments.
• There is possible something else is going on here, particularly in light of the other User-Agents showing up on that system.
• The involved IP is from a CDN (Akamai), so nothing conclusive there.
• The target domain for this request is www.cars.com.

Action:

• Alarm
• Scan asset to ensure it is not infected with a Browser Hijacker