network
Email Security Risks

 

    1. Email borne viruses
    2. Viruses and other types of malicious code are often spread as attachments to email messages. Before opening any attachments, be sure you know the source of the attachment. It is not enough that the mail originated from an address you recognize. The Melissa virus (see References) spread precisely because it originated from a familiar address. Also, malicious code might be distributed in amusing or enticing programs.

      Many recent viruses use these social engineering techniques to spread. Examples include

      • W32/Sircam
      • W32/Goner

      Never run a program unless you know it to be authored by a person or company that you trust. Also, don't send programs of unknown origin to your friends or coworkers simply because they are amusing -- they might contain a Trojan horse program.

    3. Hidden file extensions
    4. Windows operating systems contain an option to "Hide file extensions for known file types". The option is enabled by default, but a user may choose to disable this option in order to have file extensions displayed by Windows. Multiple email-borne viruses are known to exploit hidden file extensions. The first major attack that took advantage of a hidden file extension was the VBS/LoveLetter worm which contained an email attachment named "LOVE-LETTER-FOR-YOU.TXT.vbs". Other malicious programs have since incorporated similar naming schemes. Examples include

      • Downloader (MySis.avi.exe or QuickFlick.mpg.exe)
      • VBS/Timofonica (TIMOFONICA.TXT.vbs)
      • VBS/CoolNote (COOL_NOTEPAD_DEMO.TXT.vbs)
      • VBS/OnTheFly (AnnaKournikova.jpg.vbs)

      The files attached to the email messages sent by these viruses may appear to be harmless text (.txt), MPEG (.mpg), AVI (.avi) or other file types when in fact the file is a malicious script or executable (.vbs or .exe, for example). For further information about these and other viruses, please visit the sites listed on our Computer Virus Resource page:

      Chat clients

      Internet chat applications, such as instant messaging applications and Internet Relay Chat (IRC) networks, provide a mechanism for information to be transmitted bi-directionally between computers on the Internet. Chat clients provide groups of individuals with the means to exchange dialog, web URLs, and in many cases, files of any type.

      Because many chat clients allow for the exchange of executable code, they present risks similar to those of email clients. As with email clients, care should be taken to limit the chat client’s ability to execute downloaded files. As always, you should be wary of exchanging files with unknown parties.

    5. Packet sniffing
    6. A packet sniffer is a program that captures data from information packets as they travel over the network. That data may include user names, passwords, and proprietary information that travels over the network in clear text. With perhaps hundreds or thousands of passwords captured by the packet sniffer, intruders can launch widespread attacks on systems. Installing a packet sniffer does not necessarily require administrator-level access.

      Relative to DSL and traditional dial-up users, cable modem users have a higher risk of exposure to packet sniffers since entire neighborhoods of cable modem users are effectively part of the same LAN. A packet sniffer installed on any cable modem user's computer in a neighborhood may be able to capture data transmitted by any other cable modem in the same neighborhood.

...........................................................................................................................................................

PC Wizard Service Miami Fl, USA For Computer Repair Service Appointment

In-Shop or On-Site Service! Call 24 HOURS

Toll Free: (866) 389-5031 Miami: (305) 278-6945 Broward: (786) 228-8052

Miami Dade, South Dade, HomeStead, Broward County FL area

OUR PARTNERS
Speed up your computer with memory from 4AllMemory.com! - 128x125 20% Off - Summer Coupon! TigerDirect

Toll Free: 1-866-389-5031 Miami (786) 228-8052 | ©2007-2008 Pc Wizard Service All rights reserved.

Pc Wizard Service | Company Info | Site Map | Hot News | Support | Contact Us | Xml Feeds | RSS Feeds