Outbreak Name: Multiple Stration Variants

Outbreak Date: Sept - Nov 2006

Background

  • "Stration" is a mass-mailing worm
  • From September - November virus writers released waves of Stration variants, designed to entice recipients to open messages by claiming to be security alerts or email bounces
  • Many Stration variants contained spam engines that were used to send spam from infected PCs

Virus Outbreak Filters Results

  • Effectively protected against Stration outbreaks with 14 different targeted Outbreak Rules as well as "always" on Adaptive Rules
  • Average lead time: 5 hours 43 minutes
  • During outbreak, ~ 2.4M Stration messages were quarantined by VOF customers
  • Over $47M in customer savings

Timeline

Assumes 10% of messages opened and $200 per-desktop clean up costs.

* As named by Sophos.
** Calculated as publicly published signatures from the following vendors: Sophos, Trend Micro, Computer Associates, F-Secure, Symantec and McAfee. If signature time is not available, first publicly published alert time is used.