Be careful of Valentine's Day greetings

Brian Krebs of the Washington Post warns of the dangers of Valentine's Day e-greetings:
http://blog.washingtonpost.com/securityfix/2007/02/valentine_or_virus_1.html

Here in Australia Valentine's Day has been and gone, but the e-danger remains.  I'm seeing a lot of Valentine related spam hitting my network, many with viral payloads attached. 

I automatically remove executables from all emails before they are delivered to my users here at the office, but I cannot protect them from malware that is delivered to their personal email accounts and which they may be checking via Webmail during the day.  Therefore, we have a policy that users may not open non-business attachments using any company computer, whether it be emails received at the office, or accessed via a Webmail service.  When I reminded users of this policy, and specifically mentioned Valentine's Day emails,  I was accused by one person of throwing a bucket of cold water over the good feeling of the day, but that's too bad - they'd be feeling *far* worse if they infected one of my networks by opening something they shouldn't.

I have seen many companies with a 'no attachments' policy, but few stipulate that the ban extends to personal email accounts accessed via Webmail, and yes, I have seen users justify their behaviour by saying "but its not my work account".  They don't seem to realise that Webmail can infect their office computer.

So anyway, be careful out there gang. Don't open attachments and don't be tempted to visit spammed links - that spammed site may try to infect your system using a security exploit, whether it be a browser exploit, or a QuickTime exploit, or a Flash exploit or a java exploit or whatever else they can think up.  Curiosity doesn't just kill cats, it also kills computers.

Published Thu, Feb 15 2007 7:28 by sandi