Re: Leaked memo says Conficker pwns UK Parliament

["Larry Seltzer" <larry () larryseltzer com>]

The memo doesn't actually say that they've been infected, it just warns
users about what could happen. But if you can attach unauthorized
devices to their network and get on it speaks really badly of their
security policies

Larry Seltzer
eWEEK.com Security Center Editor
http://security.eweek.com/
http://blogs.pcmag.com/securitywatch/
Contributing Editor, PC Magazine
larry.seltzer () ziffdavisenterprise com


-----Original Message-----
From: funsec-bounces () linuxbox org [mailto:funsec-bounces () linuxbox org]
On Behalf Of Juha-Matti Laurio
Sent: Monday, March 30, 2009 4:45 PM
To: funsec () linuxbox org
Subject: [funsec] Leaked memo says Conficker pwns UK Parliament

"The House of Commons IT systems has reportedly been infected by the
infamous Conficker superworm,
which has previously infected millions of Windows PCs and affected the
operation of hospitals, military and large corporate systems.

Political blog Dizzy Thinks first reported that a memo (below) sent out
to parliamentary IT network users
on Tuesday night warned that Conficker had disrupted the operation of
parliamentary systems."
--clip--

> From the memo mentioned:

"We are unable to clean PCs and portable computers which are either not
switched on or which are not authorised devices.
We therefore ask that if you are running a PC or portable computer not
authorised to be on the Network that you take it off immediately.

* An additional characteristic of this virus is that for some types of
files it can skip direct to the Network
from a USB memory stick or other portable storage device (e.g. mp3
players) without hitting the virus checker software.
We ask that for the time being you do not use memory sticks or any other
portable storage devices on the Parliamentary Network."

More at
http://www.theregister.co.uk/2009/03/27/conficker_parliament_infection/

Juha-Matti
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.



_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.