 
  See your link here
|
For more info on a specific newsletter, click the title. Details will be displayed in a new window.
Subscribe to
Computerworld 40 years of the most authoritative source of news and information for IT leaders.
Fizzer Worm Sparks Concern About Remote Security Risks
or
Other Security Stories
|
|
|
|
May 19, 2003 (Computerworld) --
Last week's Fizzer worm appears to have had little impact on corporate networks, according to IT managers and analysts. But the malicious code and spyware that such viruses leave behind on unprotected systems could prove to be a long-term headache for companies, they said.
Fizzer represents an emerging class of worms that try to circumvent increasingly sophisticated corporate defenses in a variety of ways. The worm was contained in executable attachments embedded in e-mail messages with innocuous-sounding subject headers.
In general, companies that keep their antivirus software up to date and have policies for filtering executable attachments would have been protected against Fizzer, said Russ Cooper, an analyst at TruSecure Corp. in Reston, Va.
Pete Lindstrom, an analyst at Spire Security LLC in Malvern, Pa., said IT and security managers who haven't yet taken such basic defense measures are simply being "derelict in their duty."
But workers who dial into corporate networks from their homes and other remote locations may not have full-blown defenses available to them and are therefore more vulnerable to having their PCs infected by such viruses, said Michael Allgeier, data security officer at the Lower Colorado River Authority in Austin, Texas.
That could prove dangerous because of the payload carried by worms like Fizzer. According to F-Secure Corp., a Helsinki, Finland-based antivirus software vendor, Fizzer contains a built-in Internet Relay Chat back door, a denial-of-service attack tool, a keystroke-logging Trojan, an HTTP server and other components.
Such capabilities could allow hackers to remotely control compromised machines and steal data from them or mine them for passwords, analysts said. And connecting a compromised system to a corporate network might let hackers burrow past other defenses.
"I think the biggest security threat today is remote users," said David Krauthamer, director of information systems at Advanced Fibre Communications Inc. in Petaluma, Calif. "It's becoming easier to gain an access foothold to a corporate network."
"We don't have any control over remote workstations or home PCs or kiosks or wherever it is that people access our networks from," Allgeier said. "We can't really rely on personal firewalls and antivirus software to detect Trojans and keystroke-loggers."
The Lower Colorado River Authority has begun to roll out software developed by Austin-based WholeSecurity Inc. that scans individual desktop PCs for malicious code. Allgeier said it's looking to deploy the tool for remote users as well.
 | |
|
|
Print this Story |
|
Send Us Feedback |
|
E-mail this Story |
|
Digg this Story |
|
Slashdot this Story |
|
|
|
|
|
 |
| All Zones Application Performance Zone Business Continuity Zone The File Data Management Zone Security Management Zone The SAS Zone Business Intelligence and Analytics Zone Windows Protection Zone The Enterprise Search Zone Software as a Service Zone The Security Zone |
|
See your link here
|
 |
||||||||
| ||||||||
| ||||||||
| ||||||||
|
Moving to Windows Vista: The Promise, The Reality
Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs. 
Download this white paper today!
Read up on the latest ideas and technologies from companies that sell hardware, software and services.
- 'Experimental' security fix is malware, Microsoft says
- 16 e-mail and instant messaging boosters
- Tough economic climate can heighten insider threat
- More top stories
 The Security Zone
Securing your network begins at the gateway, also called the perimeter, to keep unauthorized users, viruses and malicious code from entering your systems. Deploying multilayer technologies is your first line of defense. With the mobility of employees and the ease with which external devices can be brought in and out of a network, continuing to build your security plan for network servers and clients is a must. Fortunately, there is much that organizations can do to protect themselves from attacks - internal and external. One of the key facets of a successful security strategy is protecting the servers that run critical applications and house so much of your essential data. Having the right policies, procedures and server configurations is critical. Learn more in The Security Zone See All Zones
|
 Fired up about IT? Join Sharkbait and share your true tales of IT. SharkBait is the place for you to sound off about everything IT – the good, the bad, and the rest of the weird stuff you deal with every day.New baits 
|
|
|
Seth Weintraub:
Apple Macbook Event Liveblog
I'll be liveblogging here when the event begins. That's scheduled for 1 p.m. EDT. ... [more]
|
