FW: Sircam infects the Feds

Bruce Tober tbt at star-dot-star.co.uk
Sat, 28 Jul 2001 18:03:09 +0100


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


In message <3B618CB8.5513890C@solid-state-logic.com>, Martin hepworth 
<martinh@solid-state-logic.com> writes
>I note that Sophos put out an alert and update 18th July. The whole
>thing went crazy 25th. So everyone had 6 days to update their AV
>technology to catch this before it hit bad. Shame on the feds for not
>doing basic stuff.


OTOH, AV software isn't perfect:

Symantec fails to stop SirCam
By John Leyden
Posted: 27/07/2001 at 12:30 GMT

http://www.theregister.co.uk/content/56/20696.html

The SirCam worm has revealed weaknesses in anti-virus protection relied 
on by many firms as a first line of defence against viral infection.
It's been discovered that both Baltimore Technologies MIMEsweeper 
content filtering software and Symantec's perimeter protection product, 
Norton Antivirus for Gateways v2.x, fail to block the prolific virus.
Norton Antivirus for Gateways fails to see email with attachments 
contaminated by the virus, even if the correct settings have been 
applied and the latest versions of virus-identfying signature files have 
been downloaded.

- -- 
| Bruce Tober, <tbt@star-dot-star.co.uk>,           Freelance Journalist,             |
|               My Website <http://www.star-dot-star.co.uk/>                                |
| Birmingham, UK, EU +44-780-374-8255 (Mobile) +44-1562-638-704 (Landline) |

-----BEGIN PGP SIGNATURE-----
Version: PGPsdk version 1.7.1

iQA/AwUBO2LwTccIpTh0zLu1EQJevQCgq9Jd3QX0G5z3jcKGRpu/NbvxHKAAnjYC
FpWG+TJ4kzf4HmbLamH1jK4E
=NVnE
-----END PGP SIGNATURE-----