Slashdot Mirror
Blogs Latest Source of PC Infection
smooth wombat writes "The BBC has a story which indicates that filtering firm Websense believes at least 200 fake blogs are in existence which have malicious code that could infect your pc. Websense said it had seen examples of some computer criminals creating a legitimate looking weblog, loading it with keylogging software or viral code, and then sending out the address of it through instant messenger or spam e-mail. Websense warned that viruses hosted on weblogs might be a danger because they get round the filtering systems many firms have created to ensure malicious programs do not reach employees." From the article: "In separate cases some blogs were being used as storage lockers holding chunks of malicious code that the controller of a network of zombie machines wants those remotely-controlled computers to use."
Actually, we block webmail because it *IS* a security vector; files that our lusers download from hotmail or yahoo's web mail system isn't checked for viruses/trojans before it enters the network (yes, we run AV software on each workstation, but blocking all exe's/etc at the MTA level is much safer). Our lusers could also use a webmail system for data theft.
Besides, they are at work to work, not to email their friends from their personal email accounts.