SM-Bot
8 Mar 2004, 8:35pm
A new variant of the Sober worm surfaced this morning which pretends to be a Microsoft software update that protects against a new version of the MyDoom worm.
Once activated the worm displays a patch loading screen, but harvests email addresses and mails itself out using its own SMTP engine.
The email, written in either English or German, has the headline 'Microsoft alert: please read!' The body text adds: 'New MyDoom virus variant detected - please download this digitally signed attachment.'
The full report
Once activated the worm displays a patch loading screen, but harvests email addresses and mails itself out using its own SMTP engine.
The email, written in either English or German, has the headline 'Microsoft alert: please read!' The body text adds: 'New MyDoom virus variant detected - please download this digitally signed attachment.'
The full report