NEWS FROM THE LAB - Saturday, January 15, 2005

First Mydoom of the year Posted by Mikko @ 20:42 GMT

Apparently we have a new Mydoom in our hands...sending various different types of messages with EXE, SCR or PIF attachments (31774 bytes) or a ZIP (variable size).

The message bodies we've seen so far include these ones:

The message contains Unicode characters and has been sent as a binary attachment.

Mail transaction failed. Partial message is available.

The message cannot be represented in 7-bit ASCII encoding and has been sent as a binary attachment

As well as this one, which is quite different from traditional Mydoom messages:


So far this outbreak doesn't look to bad...but hey, it's a weekend, and sensible people don't read their emails.