> It  seems  fairly certain that this virus will be released within an
> encrypted  zip

Maybe,  maybe  not.  The  easiest  way  to get a payload delivered via
e-mail right now is certainly to just pop a JPEG directly into an HTML
message  and  rely  on  unpatched  Outlook  to  render  it;  remember,
launching  a  JPEG from an archive may end up launching a full-fledged
photo  editor  that  may  not  even  be  a  Microsoft product. Another
e-mail-driven  infection  vector will be messages from "known senders"
with  clickable  text  that  simply  generates  an image/jpeg response
stream for unpatched IE. EZIPs aren't my worry with this one.

--Sandy


------------------------------------
Sanford Whiteman, Chief Technologist
Broadleaf Systems, a division of
Cypress Integrated Systems, Inc.
e-mail: [EMAIL PROTECTED]
------------------------------------

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".    The archives can be found
at http://www.mail-archive.com.

Reply via email to