[PBARC] W32.Sober.O@mm Virus alert
WOLF, EARNEST G
EWOLF at entergy.com
Mon May 2 15:25:48 EDT 2005
The DeepSight Threat Analyst Team is raising the ThreatCon to
Level 2 in response to W32.Sober.O at mm being increased to a
category 3 threat. The mass mailing worm W32.Sober.O may
arrive as an attachment named account_info-text.zip,
mail_info.zip, or our_secret.zip. The zip archives contain a
malicious executable named "Winzipped-Text_Data.txt
.exe". Although the file appears to be a text file it
actually has a double extension of exe or pif and is the
worms binary executable.
More information about the PBARC
mailing list