RE: Decrease in Threats?

I have seen a big drop im mail-based threats since the latest Sober petered
out, but the background volume of non-Sober infected messages has remained
pretty steady.

Here are infected incoming message counts for the past 12+ months:
	2005-01 - 4487
	2005-02 - 3699
	2005-03 - 2247
	2005-04 - 2038
	2005-05 - 80393
	2005-06 - 3161
	2005-07 - 2307
	2005-08 - 2753
	2005-09 - 2238
	2005-10 - 2812
	2005-11 - 163945
	2005-12 - 233257
	2006-01 (so far) - 10780

My spikes in 2005-05 and 2005-11 thru 2006-01 were due entirely to incoming
Sober-infected messages.

Most of the infected messages so far this year were Sober, dying off in the
first few days of January. After January 5, I have only counted 2308
infected messages so far. This volume is still well within the normal range
for the past year.

If you are seeing a big decrease other than that explained by Sober
finishing up its "work", maybe somebody upstream is helping with some
filtering. Or maybe educating your users paid off in decreased home computer
infections sending junk to work. Or maybe you're just lucky.