Once again the IT Security world is a buzz with the latest flavor of the ZeuS (aka Zbot) malware attack targeting corporate web based email users.
As is true with all versions of this malware, the end-user turns to victim by downloading the virus. In this case, the latest is a spam campaign pushing the password-stealing ZeuS Trojan to corporate users by presenting itself as a legitimate web based email upgrade from Microsoft Outlook Web Access. The Spam email tricks users into downloading the malicious software by using the Outlook Web Access design and themes. In short, the email is believable looking and … completely bogus.
Matthijssen Inc. believes that in addition to up-to-date virus protection, education is the best defense against malicious software. We are sending you this alert so you can educate your work force and remind them that they should be wary of unsolicited emails with links and attachments.
Here are several best practices published by the leading security firms:
· Install quality anti-virus software
· Install real-time and anti-virus spyware protection
· Keep anti-malware and anti-virus applications current
· Perform daily scans
· Disable auto run
· Disable image previews in Outlook
· Don’t click on email links or attachments
· Surf Smart
For more information call Matthijssen, Inc at 800-845-2200 or read about it at http://www.pacitnews.org/wp-content/uploads/2009/10/OWA-Advisory-Oct-2009.pdf