Worm Masquerades as Microsoft Patch
A new worm purporting to contain a patch to defend against MyDoom is attacking Windows machines throughout Europe and parts of North America.
Sober.D appeared Sunday and began spreading in Germany and the United Kingdom. The worm arrives in an e-mail message with a subject line of "Microsoft Alert: Please Read!" and carries a sending address with a Microsoft domain. The domain extension on the messages are typically from Germany, Israel, Switzerland or Austria.
The new worm comes a week after the largest, most concentrated onslaught of virus activity in recent memory, which included the appearances of 16 new viruses within about 10 days. Most of those new threats were variants of existing viruses, including MyDoom. The original version of Sober hit the Internet last October and never amounted to much.
Many of the samples of the new variant that antivirus vendors have seen so far have been written in German. :
