NEWS FROM THE LAB - Tuesday, April 19, 2005

New Sober variant is out there Posted by Mikko @ 05:32 GMT

New Sober variant has been seeded last night. Spreading speed is unknown at this time, but many previous Sober variants have been fairly big problems.

Once again, this variant send German messages to .de addresses and English messages anywhere else. The message claims that someone else has been receiving your emails in error and urges you to open up the attachment to see the emails in question. Don't.

Right now we detect this one as Email-Worm.Win32.VB.aj.