[Discuss] email virus

markw at mohawksoft.com markw at mohawksoft.com
Wed Jan 11 08:31:22 EST 2012


I won't post it, because I'm not sure who would be vulnerable, but I just
received this great email virus.

It basically uses google code javascript decryption to deploy the package
sent as an encrypted text stream. Nice.

How will the mail filters deal with this? Can they? The decrypt is written
in javascript and comes from the google code url, so it is probably viewed
by filters as safe. The text stream looks merely like random text with no
obvious patterns also, your javascript stream gets blacklisted? Change the
encrypt key, done.





More information about the Discuss mailing list