Who's To Blame?
In a recent article, CNN reports that on the heels of the Anna Kournikova virus, town officials praised the author, suggesting that the hacker -- known as "OnTheFly" -- would be a good expert on computer security. Mayor Siebold Hartkamp, of Sneek, Netherlands, went on to say, "I've learned that former poachers make the best game wardens. We're looking for just these kinds of kids. He should come and have a chat with us."
Hopefully, the mayor is more cognizant of techniques used in poaching than he is in techniques involved with virus authoring. "OnTheFly" actually wrote nothing. Instead, he used a tool invented by (K)Alamar, an Argentina hacker who has since pulled the virus generating program. Interestingly, it is reported that (K)Alamars mother praised him as much as the mayor praised "OnTheFly". In any event, the tool allowed "OnTheFly" to choose from a variety of menu choices and built the virus for him automatically. Mr. Mayor, certainly this does not qualify as genius. Im sure there are millions of talented computer users who can follow simple onscreen instructions and who dont use that skill to create and distribute viruses. Side note: the same tool has been attributed to the creation of VBS/Forgotten and VBS/Pica. Robert Vamosi, contributor to ZDNet, shows just how easy such a task can be in his article, How the "Anna" Virus Was Created.
The so-called "author" of the Anna Kournikova virus cited research claiming that "Surfing people haven't learned anything from the I Love You virus." Most likely, the research referenced was the recent cooperative survey compiled by IDC researchers and MessageLabs. Indeed, this survey found that a significant percentage would open an email titled I Love You - in spite of knowledge of the LoveLetter virus which travelled with the same moniker.
Is it really true that users simply cant resist the temptation of opening unexpected attachments? Apparently, if the subject line is compelling enough, a significant percentage will. Indeed, the virus may be the catalyst for changing the way enterprises view personal email. Already, some companies are planning more aggressive measures to ban active content from Inboxes and hold users more accountable. According to ZDNet, some companies are "starting to point fingers at end users who have shirked their responsibilities regarding attachments."
Information Security Magazine printed a timely topic, AV Alternatives, which discusses means to enhance defenses against new viruses. According to the author, security expert Robert Vibert, "organizations should explore how behavior blockers, malware filters, macro certifiers and integrity checkers can augment their existing antivirus scanners and provide another layer of defense on their digital perimeters."
My advice remains the same. If you didnt expect it, dont open it. If you must open it, scan it first with updated antivirus protection. Use adjunct technologies to provide that extra layer of protection. And most of all, if you dont need it, dont peek just delete it. Visit the free Prevention Center and make sure your security patches are up to date, your browser settings are secure, and your system is virus free.

