{Spam?} New Trojan

[Scott Silva]

on 7-27-2008 1:07 AM Hugo van der Kooij spake the following:
> Randal, Phil wrote:
> | New Trojan
> | Folks, there's a new trojan being bulk spammed.
> | Block the attachment Tax_Invoice.zip if you can.
> 
> It seems it is a variation of something going on for years. In fact this
> ~  new set seems to be in use 3 weeks ago in Germany. Just with different
> slogans.
> 
> Last year in April I have gathered some info from raw data from which we
> estimated that 110 new variants popup daily. There is no way you can
> tackle this with patterns.
> 
> I think it is vital to use anti-spam tactics on each message. It will be
> less and less likely that your pattern based scanner will detect the
> first wave of of a new variant. But they will still have lots of the
> other characteristics that spam and malware have show over the years.
> 
> So in doing a bit of poking around on this one will also result in the
> answer to the issue of wether or not it is smart to stop spam scanning
> if you find a virus: It is NOT smart.
> 
> Hugo.
> 
I block executables and password protected zips. If someone desperately needs 
to pass an executable, they need to make arrangements for it to be released 
from quarantine. I just do not trust any of my users to "make the right choice".

I swear if a dialog box popped up saying " Clicking this button will make your 
firstborn child cease to exist", they would still blindly click "yes"!


-- 
MailScanner is like deodorant...
You hope everybody uses it, and
you notice quickly if they don't!!!!

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 258 bytes
Desc: OpenPGP digital signature
Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20080728/6327be76/signature.bin