Feeds

Symantec fights auto-responder menace

No tsunamis swamping spoofed addys

  • alert
  • submit to reddit

SANS - Survey on application security programs

Virus notification alerts will hopefully become less of a nuisance after modifications to Symantec's mail server security products announced this week.

Mass mailing viruses frequently spoof the sender's address in infected emails sent out from pox-ridden PCs. This forged email address is often randomly plucked off the infected computer by a virus.

Many gateway applications that scan email attachments for viral content email auto-responds when a virus is found. If the 'Sender' name has been forged, the auto-reply will be sent to an innocent party, causing unnecessary confusion and stress. A false accusation may even harm an organisation's relationship with clients and partners. Bounced messages from auto-responders are feeding a flood of useless and malicious messages that threatens to swamp legitimate emails for many users, include many whose Linux or Apple Mac machine are immune to Windows malware.

Symantec has turned off this auto-responder feature by default for the last two years but systems admins insist on turning it back on, according to Chris Miller, a Symantec mail security product manager. In response the company has come up with a more sophisticated approach, called Mass Mailer Cleanup, with the latest version of its gateway product Symantec Mail Security for SMTP 4.0. Miller explained this technology was able to differentiate between mass mailers and regular viruses, only sending notifications for the latter. Mass Mailer Cleanup also deletes the entire content of messages generated by mass mailer viruses so that internal users receive fewer useless messages. The technology will feature in other Symantec AV product for Lotus Notes and Microsoft Exchange, he added.

Symantec hopes the AV industry as a whole will modify its approach to auto-responder 'virus-generated spam', which has historically been treated as something of a marketing tool.

In years past notifying people they may have sent a virus performed a useful function that has been eroded by the mass-mailer auto-responder problem. Symantec move to minimise this problem is welcome even if is overdue, we could have really done with those auto-responder messages from Symantec, NAI and Sophos gateways during the MyDoom epidemic, for example. ®

Related stories

Auto-responders magnify Sobig problem
The illicit trade in compromised PCs
Anti-spam tsunami hits SMEs

High performance access to file storage

More from The Register

next story
Obama allows NSA to exploit 0-days: report
If the spooks say they need it, they get it
Samsung Galaxy S5 fingerprint scanner hacked in just 4 DAYS
Sammy's newbie cooked slower than iPhone, also costs more to build
Snowden-inspired crypto-email service Lavaboom launches
German service pays tribute to Lavabit
Mounties always get their man: Heartbleed 'hacker', 19, CUFFED
Canadian teen accused of raiding tax computers using OpenSSL bug
One year on: diplomatic fail as Chinese APT gangs get back to work
Mandiant says past 12 months shows Beijing won't call off its hackers
Call of Duty 'fragged using OpenSSL's Heartbleed exploit'
So it begins ... or maybe not, says one analyst
prev story

Whitepapers

Top three mobile application threats
Learn about three of the top mobile application security threats facing businesses today and recommendations on how to mitigate the risk.
Combat fraud and increase customer satisfaction
Based on their experience using HP ArcSight Enterprise Security Manager for IT security operations, Finansbank moved to HP ArcSight ESM for fraud management.
The benefits of software based PBX
Why you should break free from your proprietary PBX and how to leverage your existing server hardware.
Five 3D headsets to be won!
We were so impressed by the Durovis Dive headset we’ve asked the company to give some away to Reg readers.
SANS - Survey on application security programs
In this whitepaper learn about the state of application security programs and practices of 488 surveyed respondents, and discover how mature and effective these programs are.