OT: CryptoWall Alert

[Fairlight]

On Wed, Oct 01, 2014 at 03:53:22PM +0000, Chris Sellitto thus spoke:
> All of our computers were protected with Symantec Endpoint, with up to

No, apparently all of your computers were -assumed- to be protected with
Symantec Endpoint, but really weren't protected.

This is why user security training is critical.  All the A/V and
Anti-Malware software in the world is useless if your users are not trained
not to do -stupid- things like open "invoices" from unknown parties (or
even known parties when none were expected), etc.  There are whole sets
of behaviours which should be beaten out of users to prevent exactly this
thing.

The failure is not wholly in your A/V suite; the failure is partly in the
fact that your users weren't well enough educated to make the right calls.

That's the -real- take-away from a fiasco like this.

mark->
-- 
Audio panton, cogito singularis.