Worm Hides as Mail Memo

The latest Internet worm comes concealed in a message that appears to be a memo from a systems administrator.

It shows up as an e-mail with "Your Account" for a subject line and a message that says it has important information about an e-mail account and an address which will be expiring. It is signed "Administrator" and says to see an attachment for details.

But the attachment, labeled "message.zip," contains a worm that tries to use a script flaw in Internet Explorer to mass-mail itself. The mailing can clog networks and slow traffic.

Microsoft has produced a patch for the Explorer flaw last April so the worm will affect only those who open the attachment and who have not fixed their computer.

Source:  SecureAgent Software's Secure eNewsletter - Volume 159