This is the message that helps to spread a new worm

Jun 21, 2006 11:20 GMT  ·  By

W32/Sixem-A is the name of the malicious piece of software discovered Monday by the Sophos security company that exploits the fans' football fever with the unfolding of the World Cup events.

The worm can compromise a system if the user downloads an infected file or opens an e-mail attachment carrying the malware. Once in the computer, W32/Sixem-A will lowers the security level in order to download additional malicious software and will use its own mail engine to spread itself using the user's e-mail contacts.When sending an e-mail the worm will randomly pick between one of the following senders: [email protected], [email protected], [email protected], [email protected], [email protected], [email protected].

As a subject it will display on a random basis: "Soccer fans killed five teens", "Crazy soccer fans", "Please reply me Tomas", "My tricks for you", "Naked World Cup game set", "My sister whores, shit I don't know" together with messages that inform the user that football fans have killed five teens or that nudists are preparing a special tribute to the World Cup. All in order to determine the user to execute the attachments that come like this: name.jpg.exe, name.gif.exe or name.bmp.exe.