Blue Coat Stops IM 'Buddylinks' Spim

[tamarisk]

http://www.net-security.org/press.php?id=1974

Blue Coat Stops IM 'Buddylinks' Spim
Posted on 14 February 2004

Unwanted Adware Program Spams All Users Detected on AOL Instant Messaging Buddy Lists

SUNNYVALE, Calif., Feb. 13, 2004 -- Blue Coat™ Systems, Inc. (Nasdaq: BCSI) today announced that its ProxySG™ appliances safeguard enterprise networks from the recently discovered "BuddyLinks" adware application. This recently discovered form of instant messaging adware, or spIM, disrupts business productivity, and serves as a "proof-of-concept" for future instant messaging threats.

Symptoms
An unwanted adware application is propagating through the AOL Instant Messenger community. The adware can be executed when users visit the www.wgutv.com or download.buddylinks.net Web sites, or receives a message from an AIM buddy with the content "Check this out: [URL]". When the user clicks on the link within the instant message, a Web browser is directed to a Web site with a download prompt. If the download is accepted, software is downloaded which sends the same message to the entire AIM buddy list. Variants of the URL exist, although the site from which the actual software is downloaded is consistent.

Solution
Blue Coat proxy appliances are ideally suited to address and stop Web-based adware from impacting the network and business productivity. There are two parts to this solution:
Blocking the download of the offending software - If you are running Blue Coat's ProxySG the easiest solution is to simply block the download of the software that performs the propagation of the IM message.

Blocking the propagation of the AIM message - If you are running Blue Coat's ProxySG appliance and are using the IM Control feature, you can simply configure a rule that will recognize the signature of the URLs in question and prevent the IM message from being propagated to other users. The Blue Coat IM Control feature makes public instant messaging business-ready by applying method-level controls and content filtering. Blue Coat recommends that customers visit http://www.bluecoat.com/support/self...uddylinks.html for more instructions on configuring its ProxySG appliances. Those interested in learning more about the benefits of proxy appliances should also visit http://www.bluecoat.com for more information.

About Blue Coat Systems
Blue Coat enables organizations to keep "good" employees from doing "bad" things on the Internet. Blue Coat wire-speed proxy appliances provide visibility and control of Web communications to address today's new business risks -- such as inappropriate Web surfing, viruses brought in via back door channels such as instant messaging and Web-based email, and network resource abuse due to peer-to-peer (P2P) file sharing and video streaming. Trusted by many of the world's most influential organizations, Blue Coat has shipped more than 18,000 proxy appliances. Blue Coat is headquartered in Sunnyvale, California, and can be reached at (408) 220-2200 or www.bluecoat.com.

# # #

FORWARD LOOKING STATEMENTS: The statements contained in this press release that are not purely historical are forward-looking statements, including statements regarding Blue Coat Systems' expectations, beliefs, intentions or strategies regarding the future, including expectations about revenue growth and operating performance. All forward-looking statements included in this press release are based upon information available to Blue Coat Systems as of the date hereof, and Blue Coat Systems assumes no obligation to update any such forward-looking statements. Forward-looking statements involve risks and uncertainties, which could cause actual results to differ materially from those projected. These and other risks relating to Blue Coat Systems' business are set forth in Blue Coat Systems' most recently filed Form 10-Q for the quarter ended October 31, 2003, and other reports filed from time to time with the Securities and Exchange Commission.

[Omyn]

"Blue Coat enables organizations to keep "good" employees from doing "bad" things on the Internet. Blue Coat wire-speed proxy appliances provide visibility and control of Web communications to address today's new business risks -- such as inappropriate Web surfing, viruses brought in via back door channels such as instant messaging and Web-based email, and network resource abuse due to peer-to-peer (P2P) file sharing and video streaming."

I know not many people may have figured this out, but whats even better than blocking applications and games from being used on company internet is...

Firing employees that don't do their damn work.

Too many people dont take their jobs seriously.

Hell if I ever found one of my employees slacking off not doing their work I would give them a warning, then fire them next time I see something like instant messaging or personal email.

Next step to protecting from viruses, give your employees tutorials and guide books to how to protect them against viruses, never download things from email, dont click yes on any convincing web ads they may see.

Then again thats why I will always have my job as tech support, you can make alot of money benifiting off the stupidity of others.