Within the past few days, Trend Micro has been steadily receiving infection reports about a new worm from the Sober family running amok in the wild. Detected as WORM_SOBER.AX, it propagates via email by sending a copy of itself as attachment to spammed email messages. Details about the message it arrives in can be found here.

Like other Sober variants, this detection is distinct in that it has German email details, specifically in the Subject and Message Body. This trend may lead one to believe that the Sober family targets German-speaking users.
However, it should be noted that WORM_SOBER.AX also carries English email details and that the Trend Micro World Virus Tracking Center* records North America as the top region in the infection list. Trend Micro already detects this worm in its latest pattern files.

If you're new here, you may want to subscribe to our RSS feed. Thanks for visiting!