The future of malware: Trojan horses

TalkBack 26 of 35:

Next »

« Previous

• Thread View
• Flat View

I stand corrected...

Didn't bother looking since I don't recall any major vulnerability and let's face it, the Korean Input Method Editor isn't big unless you're Korean. But there could be others from the past.

Exactly what assumptions are "laughably incorrect"? We can lock down our users with Group Policy, why can't others? Nobody, not even the admins run with admin privileges all the time. You can be insanely Draconian with Group Policy if you chose to be so why would it be so difficult just to force all users to run with limited privileges. That would effectively eliminate almost all threats, wouldn't it? It sure has on our network.

Yes, the unpatched users would be blissfully unaware that their PC had been owned but you'd think ISPs would be concerned since the owned PCs would impact their networks. But the most I've seen ISPs do is block port 25 on their networks. And that's probably why most botnets and spambots are comprised of home PCs on cable and DSL networks.

If someone was targeting a corporate network, they'd have much better luck using traditional social engineering methods like phoning users and asking for their passwords. Just ask Kevin Mitnick.

Posted by: RocketEater   Posted on: 10/13/06 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Offload Reporting To Improve Oracle Database Performance Quest Software Is your organization looking for a more cost-effective way to get critical ... Download Now
• July 1st: The Virtual Presenter's Series: Start Right! Design Right! Present Right! Citrix Online Presenting online is a completely different ballgame from presenting in ... Download Now
• ChangeAuditor for Active Directory ScriptLogic ChangeAuditor drives the security and control of Active Directory by ... Download Now