[AusNOG] CryptoLocker Virus

[Thomas Jackson]

The best policy is to just block all executables coming via email - we have
all of ours go into a quarantine so someone from IT can get at them if
needed (like updates to our payroll system that only are distributed via
email for reasons that remain unclear to me). That stops the average user
from randomly clicking on attachments and I often see viruses sitting in
there that have managed to get through all of the other filters.

From: AusNOG [mailto:ausnog-bounces at lists.ausnog.net] On Behalf Of Damian
Guppy
Sent: Thursday, 24 October 2013 12:00 AM
To: Sean Slater
Cc: AusNOG at lists.ausnog.net
Subject: Re: [AusNOG] CryptoLocker Virus

Very annoying, and from what I have seen around on forums, it has picked up
a lot more this week. We decided to move ahead with blocking all executables
in emails on the clients that didn't already have the policy.