[Esa-l] ALERT: new .ZIP worm uses multiple obfuscation layers

Torkil Zachariassen torkil at flug.fo
Fri Mar 12 18:07:26 PST 2004


John D. Hardin wrote:
> 
> You may want to add "*.html?" and "*.eml" and "*.msg" to your zipfile
> poison list.

Please add those for all of us.
 
> This is getting annoying. I *so* do not want to recurse into zip
> attachments.

It is not annoying. It is a security threath, and as serious one.

The options are to block zip or handle them recursivly.

vh ...torkil...


More information about the esa-l mailing list