A new variant from the notorious spam-spewing WORM_NUWAR family is finding its way into plenty of inboxes in Japan. This worm is detected by Trend Micro as WORM_NUWAR.AOO. Aside from its junk mail routines, this worm also drops files already detected as the infamous ‘Storm Trojan’, TROJ_SMALL.EDW. Like its predecessors, this variant disables Internet Connection Sharing (ICS) and the Windows Firewall as a way to perpetuate its routines. This time around email details are leaning toward the lovey-dovey kind designed to make users think that someone is sending happy-happy thoughts along their way. The list below are a few of the Subject titles this worm can generate:

• A Token of My Love
  
• Come Dance with Me
  
• Come Relax with Me
  
• Our Love Nest
  
• Our Love Will Last
  
• Our Love is Free

To stick to the sappy theme, the malicious attachment poses as greeting cards using file names such as Love Card.exe and Love Postcard.exe. Woe betides whoever opens them. Note that, in contrast to this lovestruck worm, another WORM_NUWAR variant spreading in the wild just 3 days ago was headlining messages about wars. This malware is already included in the latest pattern file of Trend Micro.

If you're new here, you may want to subscribe to our RSS feed. Thanks for visiting!