A semblance of order has been restored to US Department of Defence mailing lists after an automated attempt to inject the Klez virus onto two lists indirectly led to a message storm. Although the infectious attachment was stripped out, the message text (which as is common with Klez came from a spoofed email address) made its way onto the two supposedly moderated lists (including the DoD news list) on Friday morning (February 14). The original infected message likely originated from the machine of an infected list subscriber, rather than through a directed attack. In any case, attempts by technicians to prevent messages using spoofed Defense Technology Information Center (DTIC) headers propagating onto the list made matters far worse. A side effect of the changes they made left the list more – not less – insecure. Full Story
About OODA Analyst
OODA is comprised of a unique team of international experts capable of providing advanced intelligence and analysis, strategy and planning support, risk and threat management, training, decision support, crisis response, and security services to global corporations and governments.