Vista vulnerable to malware

Sophos finds three of top 10 malware threats can bypass Vista security

Security firm Sophos says three of the top ten malware threats in November are capable of bypassing Microsoft's Windows Vista's security defences and infecting users' PCs.

The Vista-resistant malware - Stratio-Zip, Netsky-D and MyDoom-O - comprise 39.7 per cent of all malware currently circulating.

Sophos tested each piece of malware in the top ten on the operating system that was released yesterday, to establish whether users running Vista without any third-party security software would avoid infection.

The results showed that while the Windows Mail email client (Vista's upgrade of Outlook) could identify and halt all of the threats, Stratio-Zip, Netsky-D and MyDoom-O - each of which are commonly disseminated via email - were able to bypass the defences when accessed via a third-party web email client.

This represents a serious issue for businesses who allow employees to access their personal email at work, as well as for companies that are considering adopting an alternative email client.

'There has been much speculation about whether Vista would render existing malware extinct, and the news is now in - it won't,' said Carole Theriault, senior security consultant at Sophos.

'While Microsoft should be commended for the huge security improvements it has made in Vista, running separate security software is still essential to eliminate the risk of infection. On top of this, cyber criminals will already be looking at creating Vista-specific malware,' she said.

'Users need to think carefully about whether their current solution is going to offer sufficient protection against such emerging threats, given that some vendors continue to experience problems adapting their software for the Vista operating environment,' said Theriault.

What do you think? Email us at [email protected]