14 DAY TRIAL // A new version of the Sober worm has been recently discovered by the companies producing security solutions. Some companies call this version Sober-N, while others called it Sober-M. The worm spreads through a .Zip attachment of an email message written in English or German.
The infected emails are sent by an Internet surfer who claims he got the recipient's address by mistake, trying in this way to make the user access the attachment that contains the virus. The subject of the infected messages is "I've_got your EMail on my_account!" or "FwD: Ich bin's nochmal" and the attachment is your_text.zip, having 73 Kb. Like all previous versions, Sober only infects Windows.
The body of the mail has the following text: "Hello, First, Very Sorry for my bad English. Someone is sending your private e-mails on my address. It's probably an e-mail provider error! At time, I've got over 10 mails on my account, but the recipient are you. I have copied all the mail text in the windows text-editor for you & zipped then. Make sure, that this mails don't come in my mail-box again. bye"
Experts believe the sender is using on purpose bad English to make the message credible.
BlackSpider Technologies declared that since yesterday, over 86,700 messages have been sent to different British companies. The majority of antivirus distributors rated this version of the worm as having a medium level of danger. Since the first version in October 2003, 14 close relatives have found their way to email and file sharing networks.