how-to block ads
|
Plasticman
Will Work For Bandwidth
Premium
join:2002-09-06
Harrisville, RI
clubs:
 ·Cox HSI
| This could Backfire
Come out, Come out, Where ever you are:
Melbourne-based network services company Network Box has added a tool to its managed security services to get rid of password-protected ZIP files that contain viruses or worms. The new tool, called Crack'n'Zip, has been released today.
It is a good tool to stop dishonest people, but what about the honest people that may encript a safe zip file that they want to transfer to somebody. They will not be able to anymore....
Plasticman
--
Life is Like Your ISP.... You Never Know If You will get any Help | |
Michael Gazeley
@hknet.co
| RE: AV scan of encrypted ZIP files is a must.
I think there is a misunderstanding here.
Virus writers now are using social engineering to convince unsuspecting users to run worms or viruses, which are hidden inside password protected ZIP files, attached to the emails in question.
This means that the password is in the email itself.
For example, "Please run the attached repair program to fix the known fault in your email program. For security reasons we have encrypted the file before sending it to you. Please type in "341278" when asked for the password."
In the case of a "real" password protected ZIP file, being sent between users, it is highly unlikely that the users would include the password in the actual email the ZIP file was attached to.
Last but not least, the Network Box is a gateway security appliance, and therefore the entire scan takes place on your own box, at your office or home. At no point does the unencrypted ZIP ever leave your office or home. This is in stark contrast to having a message scanning service, where you are sending all of your personal data to someone else, encrypted or otherwise. | |
|
