Hoax Bulletins - Virus Bulletins - Security Bulletins

NOTICE TO OUR READERS

We will be glad to check out the validity of an e-mail for you. Just forward it with a word of explanation on how it was received to:

security@sdsltd.com
VIRUS & HOAX REFERENCES
 
The Environment in CyberSpace
SHERMAN DYNAMICS & SECURITY LTD.
Back to Site Map
WORDS OF CAUTION!
WORDS OF CAUTION - AGAIN!
  • Before opening any attachment, particularly from known senders, please ask your senders (only if known senders) if they actually meant to include an attachment in their e-mail. We suggest you never open an attachment from an unknown sender (just delete the attachment, then empty the trash)and you never reply with an unknown sender. That means don't reply to spammers and don't ask to be removed from their list! You are only confirming to them that you are a live e-mail address.
  • If you send an attachment to people, please run it through your virus protection software first. We suggest you write something in the text portion of the message that clearly identifies it as coming from you and your specific reason for sending it.
  • If you are sending to an addressee list, we advise you to send it "bcc" (blind courtesy copy) to protect your addressees' e-mail addresses from wider, unwanted exposure on the Internet - even if you send to friends and family. When forwarded, most people send the whole list of their names along most of the time.
Viruses, Trojans, Worms, Hoaxes, Urban Legends, etc.
 
WARNING!!!!! VIRUS THREAT!!!!!
Disappearing hard drives... Vanishing data...
Organ harvest... Contaminated Needles...
Telephone scams... Exorbitant fees...
Flesh-eating bacteria... Falling skies...
WARNING!!! CATASTROPHE!!!!

DON'T PANIC! ALWAYS CHECK THESE SITES FIRST
BEFORE NOTIFYING THE WORLD AND CLOGGING UP THE NET!
 Find out about
Hoaxes & Chain Letters
 Find out about
Viruses, Worms, etc.

GENERAL INFORMATION ON HOAXES


ANTIVIRUS SITES - HOAX INFO

GENERAL INFORMATION ON VIRUSES


ANTIVIRUS SITES - VIRUS INFO

Sherman Dynamics Hoax Bulletins

Sherman Dynamics Virus Bulletins

Fooled by a hoax? Check this out!

Sherman Dynamics Security Bulletins

 Top of page
 The Environment in CyberSpace
by Mitzi Perdue

In the real world, we worry about anthrax or small pox. These bacteria and viruses can potentially kill millions of people and it's difficult to defend against them.

In the cyberworld of computers and the Internet, there's also infectious agents that can cause great harm and that are difficult to defend against. Last year, according to a research firm in California, COMPUTER ECONOMICS, worms and viruses cost us more than $17 billion.

This figure includes the costs associated with malicious computer codes from networks, servers and clients. It also includes the costs of restoring lost or damaged files, plus lost productivity.

No one knows what the future holds, but if malicious individuals can cause billions of dollars in damage to our information systems, how much harm could state-sponsored cyber terrorists cause?

There is some good news in all of this, though. Bill Arbaugh, a West Point graduate who now teaches at the University of Maryland, believes that the vast majority of computer viruses and worms can be prevented if each of us practices good computer security.

But first, what are computer worms and viruses?

A computer virus is a program that copies itself into other programs - it's similar to the way biological viruses invade a host's cells. The computer virus becomes active when you click on the program.

Typically, a virus would come into your computer as an e-mail attachment, probably as an executable file. That is, the attachment would have the letters ".exe" or ".com" or ".vbs." Alternatively, your computer could become infected when you visit a maliciously-designed web page.

If you have a virus, when you open its file, it executes a program that can do such things as erase your files or lock up your system. One way it propagates is, it looks for your address book and then uses your computer to mail out copies of itself.

If you don't open the file, however, a virus usually doesn't harm you. A worm, however, is different.

As Arbaugh explains, "A worm is capable of self-propagation. A single execution or release of a worm can result in millions of infected hosts, whereas the single execution of a virus will only infect one host."

Worms and viruses are out there and they can do staggering economic damage. In a terrorist situation, they could do even worse. However, there are defenses.

Arbaugh's research reveals something startling: the majority of worms and viruses did their damage as much as a month after we knew how to prevent them. When the worms and viruses were doing their damage, the security holes had already been discovered and patches written to cover them.

In between the time the security vulnerabilities were discovered and the time people got around to protecting themselves, malicious code writers created damaging worms or viruses. If we had used better security practices, much of the harm that we suffered could have been prevented.

What should we do to increase our cyber security?

"The first line of defense," he says, "is run a good, well-known virus scanner and insure that it gets updated often."

Many of us have been used to used to updating our virus program every couple of weeks. Arbaugh updates his virus program whenever he logs onto the Internet, and that can be as often as four times a day.

The rewards for good computer safety practices are incalculable. They not only save you time and aggravation, they help keep damaging programs from spreading and wreaking economic havoc.

(Posted with permission from the author)
COMPUTER INCIDENT ADVISORY CAPACITY (CIAC) INFORMATION
 
EXCERPTS FROM THE CIAC SITE

Internet Chain Letters

"The Internet community is constantly being bombarded with chain letters in the form of e-mail messages. They claim all manner of warnings and dire notices of doom and gloom for your computer systems or for some poor soul somewhere, all of which will be saved if you just send this message on to all of your friends. Enter the world of the Internet chain letter. In the years before computers, chain letters were common and were sent by U.S. mail and required a stamp. This limited the extent to which chain letters were passed on, because sending them involved a real, up front cost in time to type the letters and money for stamps. The fact that most chain letters asked you to send a dollar to the top ten people in the chain caused most people to ignore them.

Today, with the click of a button, a message can be forwarded to hundreds of people at no apparent cost to the sender. If each of the so-called good Samaritans sends the letter on to only ten other people (most send to huge mailing lists), the ninth resending results in a billion e-mail messages, thereby, clogging the network and interfering with the receiving of legitimate e-mail messages. Factor in the time lost reading and deleting all these messages and you see a real cost to organizations and individuals from these seemingly innocuous messages. Not only are these messages time consuming and costly, they may also be damaging to a person's or organization's reputation as in the case of the Jessica Mydek and the American Cancer Society chain letters.

They are also illegal (See the US Postal Inspection Service information on chain letters) if they ask for money or anything else of value." (Computer Incident Advisory Capacity) 

EXCERPT FROM THE CIAC SITE ON:

How to Identify a Hoax

'There are several methods to identify virus hoaxes, but first consider what makes a successful hoax on the Internet. There are two known factors that make a successful virus hoax, they are: (1) technical sounding language, and (2) credibility by association. If the warning uses the proper technical jargon, most individuals, including technologically savy individuals, tend to believe the warning is real. For example, the Good Times hoax says that "...if the program is not stopped, the computer's processor will be placed in an nth-complexity infinite binary loop which can severely damage the processor...". The first time you read this, it sounds like it might be something real. With a little research, you find that there is no such thing as an nth-complexity infinite binary loop and that processors are designed to run loops for weeks at a time without damage.

When we say credibility by association we are referring to whom sent the warning. If the janitor at a large technological organization sends a warning to someone outside of that organization, people on the outside tend to believe the warning because the company should know about those things. Even though the person sending the warning may not have a clue what he is talking about, the prestige of the company backs the warning, making it appear real. If a manager at the company sends the warning, the message is doubly backed by the company's and the manager's reputations.

Individuals should also be especially alert if the warning urges you to pass it on to your friends. This should raise a red flag that the warning may be a hoax. Another flag to watch for is when the warning indicates that it is a Federal Communication Commission (FCC) warning. According to the FCC, they have not and never will disseminate warnings on viruses. It is not part of their job." (Computer Incident Advisory Capacity)

For a list of the types and names of some hoaxes, please visit CIAC here

 
Last Update: 05 March 2003
Top of Page To Site Map
Text from organizations as indicated - ©2003 by Sherman Dynamics & Security Ltd.
Web site created with Claris Home Page