On Fri, 7 Jul 2017, Alex wrote:
It's just a short body with a URI which downloads malware. We got hit by this pretty hard. This is where the real threats are. Receive one of these to an Exchange distribution list and your reputation with the customer suffers badly.
Defense in depth. For that sort of thing you also need dynamic blocking of the malware hosts (as much as is possible) in either your site web proxy (if you have one) or your firewall rules.
-- John Hardin KA7OHZ http://www.impsec.org/~jhardin/ jhar...@impsec.org FALaholic #11174 pgpk -a jhar...@impsec.org key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79 ----------------------------------------------------------------------- It is not the place of government to make right every tragedy and woe that befalls every resident of the nation. ----------------------------------------------------------------------- Today: Robert Heinlein's 110th birthday
