New Sober virus variant coming
This is unusual, but there is advance notice from the Bavarian Police warning about a new variant on the Sober worm which will be released tomorrow. More information can be found at f-secure, as well as sunbeltblog.
It appears that the emails may look something like this…
Subject: Registration Confirmation
Body: Thanks for your registration. Your data are saved in the zipped Word.doc file!
Attachment: registration.zip
Likely more to follow tomorrow.
Update 11/15—
And here are the details at incidents.org. Symantec has labeled this Sober.S, letter variation depends on the vendor.