Email worm on the loose?

Anyone else seeing just a ton of emails with attachments named either wicked_scr.scr, thank_you.pif, details.pif, application.pif or others today? I’ve seen these hit our work email accounts, my personal accounts, my wife’s work email, and others just in the last few hours. Our ISP seems to be stripping the attachments on our work accounts, and I’m not dumb enough to open them on my personal accounts, but I haven’t seen any news items on these. I also assume,. since I’ve seen some of them bounce back to those emails, that the worm is forging the “from” field as well.

Update: Wait, found a news story on it. Looks like the return of SoBig!

Similar Posts

  • Age issue?

    Jeremy posted today about someone calling him a “whiz kid” and how, at 24, he doesn’t really feel like a kid. Here’s the thing, without knowing much about the person who said it, it’s hard to tell where the idea comes from. In my office I’m seen by some as a “whiz kid” because I’m…

  • Couple of MT hacks

    Phil Ringalda has posted a pair of MT hacks that I’m noting here for my own benefit to read later. The Child Abuse site doesn’t have anywhere near enough traffic to have some of these problems, and well, it doesn’t have more than one blog running either, but you never know what the future will…

  • New blog

    Despite Andy’s excellent suggestions on the last comment, I decided to go with a simple Blogger blog, like this one. I actually did try and quickly download and install BlogWorks XML to do the job, but ran into server errors that I suspect have to do with something necessary not being installed on my web…

  • Feeling incomplete

    When I went to the eye doctor on Friday, the fine folks at DOC told me I could use the same frames that I had been using but that because the frames had some small scratches, I’d be better off getting new lenses. No problem, except for the fact that they no longer have an…

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.

To respond on your own website, enter the URL of your response which should contain a link to this post's permalink URL. Your response will then appear (possibly after moderation) on this page. Want to update or remove your response? Update or delete your post and re-enter your post's URL again. (Find out more about Webmentions.)