Ever since the emergence of iPod back in 2004, GFI and other experts including Gartner analysts, Ruggero Contu and John Girard have been warning that iPods are a potential danger to the corporate network. Yet, nearly one-third of medium-sized companies remain unconcerned about leaking sensitive data through devices that are highly portable with large storage capacities, according to Osterman Research.
On Oct. 18, 2006, it came to light that a number of infected Apple iPods have been rolled out of the manufacturing plant during the past month carrying a virus known as RavMonE.exe (also know as Win32/RJump.A, Worm.RJump, and Backdoor.Rajump amongst others). RavMonE.exe is a worm that opens a backdoor on Windows based systems and spreads by coping itself to portable storage drives such as USB sticks, digital cameras, external hard drives and open shares. The iPod virus threat is just one example.
Corporate repercussions
The threat that portable storage devices pose to corporations and organizations is often underestimated. Easy access to portable music players, PDAs, mobile phones and digital cameras has exponentially increased the risk of infection and drastically decreased business continuity. iPods and other portable storage devices are popular, fashionable, inexpensive, heavily promoted and freely available in today's society. These factors, plus a lack of security awareness are all major contributors to the tremendous wave of malevolent threats that are hitting corporations; making them legally liable to hefty fines or even bringing many businesses to a halt - no matter the size, no matter the industry, no matter the revenue!
This recent video iPod case has raised the alarm at how quickly a virus infection can spread on a corporate network. In order to ensure business continuity and legal compliance, corporations must counter virus infections by focusing their efforts on effective security risk management.
The days of conventional counter measures are over. Relying on voluntary compliance is not the best option anymore: Malicious insiders and gullible employees who fall for social engineering practices are the weakest link in the corporate security chain. Furthermore, anti-virus solutions are reactive rather than proactive as they usually detect issues after your system has been infected and the damage has already been done!
The proactive solution for your network
Risk management is the only effective solution to counter portable device threats by deploying software barriers that control portable storage device usage on your network. GFI Software, an international leader and developer of network security, content security and messaging software recommends the following best practices. To safeguard your corporation against RavMonE.exe and other malicious threats:
- Andre Muscat is the product manager for the network security products division at GFI Software.
