posted on Monday, March 08, 2004 3:45 PM
by
demiliani
New Worm masquerades as Windows Update
A new worm, a variant of the Sober worm has been discovered today.
Sober D tells you that it is a Microsoft update that protects against a new version of the MyDoom worm. Once activated the worm displays a patch loading screen, but harvests email addresses and mails itself out using its own SMTP engine.
The email, written in either English or German, has the headline 'Microsoft alert: please read!' The body text adds: 'New MyDoom virus variant detected - please download this digitally signed attachment.'
Be careful...