There's a new variant of Sobig out. This one is using a multi-threaded email engine within it so it pumps out a lot more email:
http://news.com.com/2100-1002-5065494.html?tag=nl The sender appears to be someone from a recognized domain name, such as ibm.com, zdnet.com or microsoft.com. The subject line typically says "Re: Details," "Resume" or "Thank you." Attachment names may include: your_document.pif, details.pif, your_details.pif, thank_you.pif, movie0045.pif, document_Fall.pif, application.pif, and document_9446.pif. >with this subject, some with others, but all with a .pif attachment. My >firewall filters out .pif's so i'm not too concerned, but it's driving my -- TriLUG mailing list : http://www.trilug.org/mailman/listinfo/trilug TriLUG Organizational FAQ : http://trilug.org/faq/ TriLUG Member Services FAQ : http://members.trilug.org/services_faq/ TriLUG PGP Keyring : http://trilug.org/~chrish/trilug.asc
