The Intelligent Virus

This week we saw the arrival of what could best be described as an “intelligent virus”. Most viruses rely to some degree on social engineering in order to trick the recipient into clicking on the attachment and thus infecting their PC. However, until now at least, most of these viruses were not that convincing. This week’s variant made use of the existing trust that exists between endusers and their IT dept./ISP/hosting company. The email seems to come from a variety of addresses, but, unlike other viruses, this one forges an address at your domain. It would not be surprising, therefore, if I had got one from support@mneylon.com !! Needless to say I didn’t, but that’s hardly the point. The point is that endusers will inherently trust their suppliers / IT departments, so sending a virus like this could easily have lead an enduser into clicking on the attachment.
Of course we got quite a few calls and emails from clients who were confused and thought that the emails were genuine, or simply could not understand why the AV filters had let some of the emails through. OF course the problem lay with the type of attachment that was being sent, or was that another virus? This last week has seen so many …
In many ways you can see this as being a war. An electronic war. Against spammers and virus writers.
The only question that remains is who will be the victor.