Bagle has less bite because of patches and education

Messagelabs said on Tuesday that although it has intercepted more than 2.5 million copies of the most recent Bagle variant, the damage could have been far more severe had the same worm been released two years ago.

David Banes, technical director of e-mail security firm MessageLabs in Asia Pacific, said the worm could have caused chaos, had it been released before users started patching regularly and software companies improved their product security.

"Now that all the different business regions have started applying their updates the numbers should start dropping off. The message [to patch and update your software] is getting through to a certain degree and the latest Windows XP service pack does a fairly good job of raising awareness that users need to patch," said Banes.

Ben English, security team leader at Microsoft Australia, said that because Bagle relies on human interaction and does not exploit a software vulnerability it was never going to be as big as Blaster or Sasser.

However, he said, other factors reducing the effect of the worm are the increasing number of people using Auto Update and the cutting down of vulnerabilities in the operating system.

"There are less vulnerabilities in Microsoft's software and people are far more rigorous in the way they patch their systems," said English.

According to English, there has been a "dramatic increase" in the number of people that use Auto Update - especially because Windows XP Service Pack 2 activates the Windows firewall and Auto Update by default.

"User education levels are increasing and that will limit the impact of this worm. Also, we are seeing a dramatic increase in the number of people that have Auto Update turned on. The consequences of not activating it are fairly significant," said English.

Advertisement

Talkback 0 comments

Latest Videos

Sponsored content

Power Centre - Content from our premier sponsors

Blogs

  • David Braue All I want for Xmas is Telstra pricing
    Five consecutive days without broadband has led me to what seemed at the time to be an act of desperation: contemplating signing up for Telstra's 100Mbps cable modem service.
  • Array Sick of broken tender sites
    Some of the state governments desperately need to invest in more user-friendly tender sites so that looking for information on government tenders doesn't have to be a game of blind man's bluff.
  • Array Cyberwar: What is it good for?
    In this week's episode, Cyberwar. What is Australia's place in the world of digital warfare? What are the implications for the NBN?
  • More blogs »

Tags

Back to top

Featured