|
Another possible variant overnight at 4:30AM
ET. Same routing as the new Sober variant from yesterday, but different
attachment: screen_photo.zip
Darin. ----- Original Message -----
From: Darin Cox
Sent: Wednesday, October 05, 2005 10:33 PM
Subject: [Declude.Virus] Possible new virus We're seeing a lot of emails with pword_change.zip
attached. May want to block it in your virus.cfg.
Subject is "Your new Password" All so
far were routed through gmx.net or web.de just before delivery, but are
originating from a variety of dial-up or broadband ISP
accounts.
Darin. |
