Internet worm poses as Gates' message
crn.com | at | by Mike
A new worm has been spreading rapidly across the Internet, sometimes pretending to be an e-mail from Microsoft Chairman Bill Gates, antivirus vendors said Monday. The worm, a variant of the Sobig worm called Sobig-C, was discovered Saturday and spreads via e-mail and network shares, according to Network Associates. It contains its own SMTP engine for creating outgoing messages and e-mails itself to addresses on the victim's system.
Sobig-C arrives as an e-mail that poses as a message from bill@microsoft.com or from addresses it finds on the victim's hard drives, according to Sophos. The infected e-mail may have subject lines such as "Re: Movie" or "Re: Approved" and a variety of attachments such as screensavers (.scr).