Re: Remotely deployable spyware
From: Kent W. England [MVP] (kwe@mvps.org)
Date: 01/04/03
- Next message: Kent W. England [MVP]: "Re: Cannot enable Windows XP Firewall"
- Previous message: Bruce Chambers: "Re: Administrator"
- In reply to: Alan: "Remotely deployable spyware"
- Next in thread: Bruce Chambers: "Re: Remotely deployable spyware"
- Reply: Bruce Chambers: "Re: Remotely deployable spyware"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "Kent W. England [MVP]" <kwe@mvps.org> Date: Sat, 4 Jan 2003 09:08:32 -0800
If your Windows and Outlook Express email reader is up to date with
security patches, you can't install spyware without a user action. In
the latest releases of OE6 you can "read messages in plain text" and
disable all of the scripting badness as well. If you use a limited
account, much spyware is thwarted, even if you click.
This ISPYNOW technique assumes appropriate alluring content in the
message to get the idiot who reads the email to click on the attachment.
One of the most common viruses out there is entirely text. It persuades
folks to delete their Microsoft Java debugger and then gets them to
worry about whether they should have done so (when it doesn't matter one
way or the other :-). I don't see why you couldn't create a text virus
to convince a lot of users to setup Remote Assistance to allow you to
monitor their desktop whenever you want and convince their friends to do
the same.
-- Kent W. England, MS MVP for Windows XP (Please respond only in the newsgroup) "Alan" <aep2002@hotmail.com> wrote in message news:0a5701c2b38b$f674a1e0$8df82ecf@TK2MSFTNGXA02... > My question is about the capability of products like > ISPYNOW which claim easy remote installation on any > computer in the world by sending a simple e-mail message. > Is this possible? Or do all spyware programs and any such > monitors require the user to execute a file? I'm so > confused. Please help
- Next message: Kent W. England [MVP]: "Re: Cannot enable Windows XP Firewall"
- Previous message: Bruce Chambers: "Re: Administrator"
- In reply to: Alan: "Remotely deployable spyware"
- Next in thread: Bruce Chambers: "Re: Remotely deployable spyware"
- Reply: Bruce Chambers: "Re: Remotely deployable spyware"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|