[Dshield] Mydoom Back?

Jon R. Kibler Jon.Kibler at aset.com
Tue Apr 1 17:11:30 GMT 2008


I have seen a half dozen emails to various users containing Worm.Mydoom.M in the past 24 hours. Prior to that, the last time we saw it were single occurrences in August and November of last year.

They are all coming from the same DSL IP in ZA:

They are all known variants:
	Subject: uo	Attach: File.scr
	Subject: Message could not be delivered		Attach: readme.zip
	Subject: Delivery reports about your email	Attach: text.zip

Anyone else seeing this?

Jon K.
Jon R. Kibler
Chief Technical Officer
Advanced Systems Engineering Technology, Inc.
Charleston, SC  USA
o: 843-849-8214
m: 843-224-2494

Filtered by: TRUSTEM.COM's Email Filtering Service
No Spam. No Viruses. Just Good Clean Email.

More information about the list mailing list