The vast infection of the systems of disparate organizations demands a better understanding of how to better prepare defenses against similar future attacks and procedures for adequately responding to those that may slip through the cracks. They will not end. Even if the developers and spreaders of this attack are caught and punished, the likelihood of ever increasing frequency and ferocity of attacks and the speed of their effect will not end. After Melissa last year, we believed that we were prepared. Rules are not changing behaviors.
Curiosity still rules.
Rules alone are not changing behaviors. Consider combining filters and other software with ongoing user education to get the message across. Even with a daily reminder, folks are still going to be tempted to open the right message addressed to them regardless unless they know better. Common sense, common sense. Even knowing better is not always the answer.