Corporations Not Doing Enough To Prevent Botnet Infections
Support Intelligence has been publishing the names of corporations who are infected with spambots and other botnets.
Dozens of corporations including 3M, ACS, Aflac, AIG, Bank of America, Borders Group, Clear Channel, Consec, McGrawHill, Nationwide Insurance, Thomson Financial, and Toshiba American Business Solutions have been identified by Support Intelligence.
[System Intelligence chief operating officer Adam] Waters was shocked to find spam emanating from "secure" corporate networks along with home users, he says, because if a PC is pumping out e-mail offers for drugs and penny stocks, it's usually infected with a bot, which could also be tracking keystrokes, mining for data, sending out corporate documents and performing other mischief.
I suspect that many of these companies rely too heavily on desktop anti-virus solutions like Symantec and McAfee which fail to detect many of these types of infections. Worse, I bet some of these companies' CIOs will be quick to block port 6667, think their job is done and then brag to the CEO that the network is now clean.
Blocking IRC isn't the solution, not even a partial one. The key is to prevent these infections from getting in the network and on to the desktops in the first place. Once they're in it's far too late as they can email or even upload confidential corporate using P2P technologies. Some of which are utilizing packet shaping and encryption methods which are difficult to detect.
[Bots Found Inside Many Big Companies]