Slashdot Mirror
Porn-Surfing Execs Infecting Corporate Networks With Malware
wiredmikey writes "According to a recent survey of malware analysts at U.S. enterprises, 40% of the time a device used by a member the senior leadership team became infected with malware was due to executives visiting a pornographic website. The study, from ThreatTrack Security, also found that nearly six in 10 of the malware analysts have investigated or addressed a data breach that was never disclosed by their company. When asked to identify the most difficult aspects of defending their companies' networks from advanced malware, 67% said the complexity of malware is a chief factor; 67% said the volume of malware attacks; and 58% cited the ineffectiveness of anti-malware solutions."
It doesn't even include any of the URLs to go to!
and 58% cited the ineffectiveness of anti-malware solutions."
So the majority of experts agree the existing solutions are ineffective. And yet the solution remains the same: Buy more of it.
#fuckbeta #iamslashdot #dicemustdie
executives must be in to weirder stuff than most mouth breathers
The top threats listed in TFA are all common-sense things to avoid with work machines. (Visiting porn sites, letting family members use equipment, installing malicious mobile apps, and falling for phishing emails.) There is a reason us IT folks tell people not to do these things at work.
And there's a reason why the executive suite doesn't listen:
"You're not the boss of me!"
(Supported by "If anything does happen, it's your fault anyway.")
Welcome to the Panopticon. Used to be a prison, now it's your home.
I've never understood why people do stuff like this. Years ago I recovered data from a CFO's laptop, only to find the thing filled with porn. Senior managers generally make enough money to have personal devices to look at porn on -- why do they risk the embarrassment of being discovered misusing company resources? I guess now that I think of it, the CFO in question wasn't fired (or even really disciplined) for this, as far as I can tell, so maybe senior managers just think that they're important enough that rules and common sense don't matter. If the laptop had belonged to a lower-level employee, he or she probably would have been disciplined.
Facts have a liberal bias.
I shudder to think of how this'll impact the BYOD policy...
Do not look into laser with remaining eye.
It's good to be the king. -- Mel Brooks, "History of the World pt 1"
Agreed. I'm one of the fortunate ones - my boss actually follows the rules, but I've worked in places where the boss is exempt from basic network security. One was a small business where the boss 'pays the bills', so he got to 'make the rules'.
When his customer database was deleted he fired his IT guy in a fit of anger. He lost a lot of money in a wrongful dismissal settlement, and lost all of his business. It might have been the IT guy who did it - but the lawyers obviously felt that 'I don't need a slow virus scanner' was more likely the cause. Or at least, reasonable doubt.
- Nec Impar Pluribus, or so I'm told.
You don't think executives don't NEED those super important "power bars", do you?
And of course execs have admin privs on their PC. They don't know what to do with it, they don't know why they got it, but don't you dare even suggesting taking it from him!
Even as the CISO you get shouted down at the management meeting when you suggest something outrageous like that. What cheek! Those dumb techdroids having higher privileges on his PC than the CEO!
Yeah, we had a good laugh.
We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
They don't get fired for it.
We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
"Why do we need backups, we have it all here, right? So why do you want to have it there, too? Do you want to steal our customers?"
I was actually asked that once.
We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
These porn-surfing execs are just taking a more "hands-on" approach to management and want to make sure they have a firm grasp on their critical infrastructure.
It gives new meaning to The Peter Principle.
You are welcome on my lawn.