Feeds

Cyber alerts are phishing magnet, says Senator

"Put that light out!"

  • alert
  • submit to reddit

Top 5 reasons to deploy VMware with Tegile

Senator Chuck Schumer has described the Department of Homeland Security's new 'cyber alerts' as a magnet for phishing expeditions and virus writers.

On Wednesday the Department sprang into action and issued its first Cyber Alert - warning users of the "SCObig" virus that had been causing havoc with email systems since Sunday afternoon.

"Details about this new variant are still emerging, but it has been validated as spreading," the Homeland Security boffins told us yesterday, as most users were entered the fourth day of cleaning up after SCObig.

Alert may not be the right word for this class of information. Our dictionary defines alert as "to notify of approaching danger or action", rather than issue a post-facto reminder 72 hours after the event.

If you build it, they will come, said Schumer:

"What DHS did today was essentially challenge computer hackers all over the world to put a virus into an email that mimics the DHS email warnings," said the Senator. "If I were a betting man, I'd put a few dollars down that the next virus that clogs computer networks is going to be transmitted through an email that looks like one of these DHS email alerts. This flaw is exacerbated by the fact that without any kind of requirement mandating ISPs and other companies to report the discovery of viruses, these warnings will likely come after a virus has stated spreading out of control."

The ARP wardens over at the Department hit back, arguing that the alerts were cryptographically signed.

Senator has adopted populist tech causes before, to a mixed reception. He demanded that Microsoft postpone the launch of Windows XP until he was satisfied that that third-party utility vendors were given equal billing, and backed an ill-advised "opt-out" list for junk email. He's made better calls with consumer cellphone issues, introducing a "Bill of Rights" for long-suffering subscribers, and conducting research into hidden charges on phone bills. A survey of plans in his home state New York showed that carriers' true bills ranged from $6.47 (Nextel) to $19.81 (Verizon) more per month than advertised. ®

External Links

Schumer slams ARP patrol
"... validated as spreading" [Homeland Security]

Related Stories

Popup Senator debuts cellphone rights bill
US Senator aims to kill Win XP launch
Senator 'Cheesy Chuck' Schumer phears the virus
Michigan law chief slams 'bogus' anti- spam group
Clinton Admin goes out in a blaze of cyber-terror

Top 5 reasons to deploy VMware with Tegile

More from The Register

next story
'Regin': The 'New Stuxnet' spook-grade SOFTWARE WEAPON described
'A degree of technical competence rarely seen'
You really need to do some tech support for Aunty Agnes
Free anti-virus software, expires, stops updating and p0wns the world
You stupid BRICK! PCs running Avast AV can't handle Windows fixes
Fix issued, fingers pointed, forums in flames
Regin: The super-spyware the security industry has been silent about
NSA fingered as likely source of complex malware family
Privacy bods offer GOV SPY VICTIMS a FREE SPYWARE SNIFFER
Looks for gov malware that evades most antivirus
Patch NOW! Microsoft slings emergency bug fix at Windows admins
Vulnerability promotes lusers to domain overlords ... oops
HACKERS can DELETE SURVEILLANCE DVRS remotely – report
Hikvision devices wide open to hacking, claim securobods
prev story

Whitepapers

Why cloud backup?
Combining the latest advancements in disk-based backup with secure, integrated, cloud technologies offer organizations fast and assured recovery of their critical enterprise data.
Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
How to determine if cloud backup is right for your servers
Two key factors, technical feasibility and TCO economics, that backup and IT operations managers should consider when assessing cloud backup.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
Getting ahead of the compliance curve
Learn about new services that make it easy to discover and manage certificates across the enterprise and how to get ahead of the compliance curve.