Sophos Rolls Out Zombie Notification Service

A new service by Sophos will warn network admins when systems on their networks have been found to send spam, or wind up on a spam blacklist.

 By Michael Hall | Posted Jul 13, 2005
Page of   |  Back to Page 1
Print Article

Sophos has announced a new alert service that clues admins in to zombie computers running on their networks.

"Zombie computers" are systems infected by malware that can, in turn, provide a malicious person with the ability to use them as spam gateways, members of distributed denial of service attacks, and other illicit activity. A recent high-profile example of zombies in action involve the Sober family of viruses, which turned PCs into conduits for nationalist hate spam.

Sophos says its service, ZombieAlert, advises service subscribers when a computer on their network is found to have sent spam to Sophos' network of spam traps. The service also provides notification if an IP from within a customer's network is listed in public Domain Name Server Blackhole Lists (DNSBL).

"Sophos is the first vendor we know of to offer an on-the-fly alert service that advises organizations that they are being used to host zombies," said David Ferris of Ferris Research. "This service is unique and very timely. I would anticipate that competitors would soon follow suit."

Sophos said the service also has applications for Internet Service Providers (ISPs), who can use it to identify and alert consumers of a threat.

Comment and Contribute
(Maximum characters: 1200). You have
characters left.
Get the Latest Scoop with Enterprise Networking Planet Newsletter

By submitting your information, you agree that enterprisenetworkingplanet.com may send you ENTERPRISENetworkingPLANET offers via email, phone and text message, as well as email offers about other products and services that ENTERPRISENetworkingPLANET believes may be of interest to you. ENTERPRISENetworkingPLANET will process your information in accordance with the Quinstreet Privacy Policy.