[Esa-l] ALERT: new .ZIP worm uses multiple obfuscation
layers
Torkil Zachariassen
torkil at flug.fo
Fri Mar 12 18:07:26 PST 2004
John D. Hardin wrote:
>
> You may want to add "*.html?" and "*.eml" and "*.msg" to your zipfile
> poison list.
Please add those for all of us.
> This is getting annoying. I *so* do not want to recurse into zip
> attachments.
It is not annoying. It is a security threath, and as serious one.
The options are to block zip or handle them recursivly.
vh ...torkil...
More information about the esa-l
mailing list