During employee orientation and through our bi-weekly tech bulletin,we do stress employee education regarding various "infection methods." However, when it's a particularly nasty virus or vulnerability (i.e. one with a high probability of success), I will generally send out an "all user" email. Not only to protect the company but also so the user is alerted so as to protect their home computer, too.
Paul Chinnery Network Administrator Memorial Medical Center -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of John Aldrich Sent: Tuesday, June 07, 2005 1:39 PM To: Exchange Discussions Subject: RE: Spoofing, Spam and Viruses Well, I don't notify on EVERYTHING that comes out, just the "common" ones and only do it occasionally. Generally I try to educate my users, i.e. "don't open any email you aren't expecting, and don't open any attachments unless you are expecting them." Social engineering is the best way I've found to avoid this sort of thing... John -----Original Message----- From: Derek Harris [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 07, 2005 1:35 PM To: Exchange Discussions Subject: RE: Spoofing, Spam and Viruses Exactly -- I don't even try to update users on most of the scams; I try to block them when I become aware of them. It's pretty easy to write a new rule using the characteristics of the message I'm trying to block, and I have a few users who alert me quickly to the new ones they see. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Boyd, Nathan Sent: Tuesday, June 07, 2005 11:12 AM To: Exchange Discussions Subject: RE: Spoofing, Spam and Viruses These phising scams now target small banks, credit unions and trust accounts, not to mention the Paypal, EBay, individuals from third world countries, long lost relatives etc. It would take an FTE to notify everyone on every Spam, Virus, Spoof and Phising alert that came out, which is why I am looking for an alternative. If we update thousands of staff members every day on the status of the latest e-mail related scam how long would they continue to read the notifications before discarding them? Nathan -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Aldrich Sent: Tuesday, June 07, 2005 9:33 AM To: Exchange Discussions Subject: RE: Spoofing, Spam and Viruses Whenever a new email exploit comes out with known features, I try to send out an email blast to all my users advising them of the specifics (i.e. "Washington Mutual, and other banks do NOT send out emails asking you to confirm your information..." etc. or "A new virus is being sent out via email with the following characteristics in the email..." John -----Original Message----- From: Boyd, Nathan [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 07, 2005 12:25 PM To: Exchange Discussions Subject: Spoofing, Spam and Viruses Members of the list, Do you currently publish statements regarding Spoofing, Spam, Phising and Viruses to staff through your intranet or within a IT manual? I am being asked on a daily basis to provide the same information on why some spam messages get through, why undeliverable are returned when the person did not send the message and asked to provide new information when a new Phising e-mail gets through our Spam Gateway. We currently are running all known solution for tackling this issue: Trend IMSS at the gateway with Virus, Content and Postini Spam Solutions (Known problem attachments are blocked at the gateway inbound and outbound with virus checks both ways also), Exchange 2003 servers all have ScanMail installed (known problem attachments are blocked) Exchange 2003 IMF on all Exchange Servers Outlook 2003 Officescan and ServerProtect Trend Antivirus managed centrally with automatic updates when they come through. We currently block 10 out of 12 messages as Spam with a daily average of 60,000 inbound messages. The only thing left for me to do is send a statement organization wide answering the management questions that are currently asked daily regarding this issue. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange To subscribe: http://e-newsletters.internet.com/discussionlists.html/ To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange To subscribe: http://e-newsletters.internet.com/discussionlists.html/ To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange To subscribe: http://e-newsletters.internet.com/discussionlists.html/ To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange To subscribe: http://e-newsletters.internet.com/discussionlists.html/ To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange To subscribe: http://e-newsletters.internet.com/discussionlists.html/ To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange To subscribe: http://e-newsletters.internet.com/discussionlists.html/ To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with.
