|
Netsky.Q New Worm Variances |
|
|
The new Netsky.Q high risk worm variance is a mass-mailing worm that consists of two components: a trojan and a mass-mailing component. Netsky.Q uses its own SMTP engine to send itself to the email addresses it finds when scanning the disk drives, then it uses the Incorrect MIME Header Can Cause IE to Execute E-mail Attachment vulnerability to cause unpatched systems to auto execute the worm when reading or previewing an infected message. The From line of the email is spoofed, and its Subject line and message body vary. The attachment name also varies and has a .exe, .pif, .scr, or .zip file extension.
|
