Michael Gazeley
@hknet.co
| reply to Plasticman
RE: AV scan of encrypted ZIP files is a must.
I think there is a misunderstanding here.
Virus writers now are using social engineering to convince unsuspecting users to run worms or viruses, which are hidden inside password protected ZIP files, attached to the emails in question.
This means that the password is in the email itself.
For example, "Please run the attached repair program to fix the known fault in your email program. For security reasons we have encrypted the file before sending it to you. Please type in "341278" when asked for the password."
In the case of a "real" password protected ZIP file, being sent between users, it is highly unlikely that the users would include the password in the actual email the ZIP file was attached to.
Last but not least, the Network Box is a gateway security appliance, and therefore the entire scan takes place on your own box, at your office or home. At no point does the unencrypted ZIP ever leave your office or home. This is in stark contrast to having a message scanning service, where you are sending all of your personal data to someone else, encrypted or otherwise. |
