resource center
  See your link here
|
TechWorld.com - Spammers have stepped up efforts to use encrypted attachments to evade filtering systems, service provider Email Systems has reported.
The technique relies on the fact that many spam systems can't scan inside e-mails containing encrypted or password-protected attachments, and work out that they are not legitimate. Without a rule to block such attachments, most systems will pass on the e-mail to recipients, handing spammers an important victory in the battle to get spam through.
In recent weeks, Email Systems detected a small but steady stream of such spam emanating from bot-compromised hosts, containing a zipped-up version of the pervasive "Storm" bot-loading Trojan horse that plagued Internet users in January.
Recipients would have been able to inadvertently unzip the Trojan using an embedded password, after being attracted by a number of eye-catching subject lines, including "Worm Detected!", "Virus Detected!", "Spyware Alert!'"and "Warning!"
Although the technique has been around for some months, spammers appear to be stepping up their attempts to use it, said Greg Miller of Email Systems. The company had quarantined hundreds of thousands of copies of attachment spam, up from levels a tenth this volume some months ago.
"We have moved on from spam being just a guy sending out huge amounts of spam," said Miller. The vast bulk of spam was now automated via bots, and this made finding new infection methods even more critical to the spam economy. "Every six months or so we see a new attack that is very successful," he said.
As antispam systems adapted to popular techniques such as image spam, criminals were having to look further to engineer spam stealthiness.
The easiest means of detecting the current encrypted file attacks would be the attachment's file size, 77KB, but this could be varied in future attacks quite easily. The best approach was simply to disallow encrypted e-mails to pass through the system at all.
For more enterprise technology news from the U.K., please visit TechWorld.com. Copyright 2006 IDG, all rights reserved.
Enterprise 2.0 Applications - Block or Not?
Learn what your organization should do to control Enterprise 2.0 Applications.
Data in Action: Making the Planet Smarter
Register Now
Product Overview Brochure
Learn how to deliver secure data and applications wherever and whenever they're needed.
How to Secure and Accelerate Your Oracle Applications
Learn about the escalating application performance and security challenges facing corporations, today!
The Workday User Experience Video
Watch Workday's Creative Director, Scott Lietzke, discuss the business-centered design philosophy at Workday.
Enterprise Application Delivery: No User Left Behind
Gain the ability to deliver applications to all users, using any device, across any network.
Business Process Framework Demo
Learn about Configurable Business Processes and Calculated Fields. Watch Now!
Accelerate SSL Encrypted Applications
Gain complete visibility into SSL application sessions, making it easy to apply appropriate acceleration and security controls to all SSL traffic.
Manager Experience Demo
Go beyond self-service solutions to perform more effectively. Watch Now.
Sign up to receive updates on the latest Networking and Internet resources
CIO
Computerworld
CSO
DEMO
GamePro
Games.net
IDC
IDG
IDG Connect
IDG Knowledge Hub
IDG TechNetwork
IDG Ventures
IDG.net
InfoWorld
ITwhitepapers
ITworld
JavaWorld
LinuxWorld
Macworld
Network World
PC World
The Industry Standard
Copyright © 1994 - 2010 Computerworld Inc. All
rights reserved. Reproduction in whole or in part in any form or medium
without express written permission ofComputerworld Inc. is prohibited. Computerworld and Computerworld.com and the respective logos are trademarks of International Data Group Inc. |
