New version of Netsky

Netsky has a new version that is called W32.Netsky.I@mm by Symantec. The new version was discovered today and Symantec has released an updated definition for it. This version does the same as the rest, however subject lines make it more enticing for a user to open. The From line is service@yahoo.com and consists of one of three different subjects or body lines that lead the user to believe their account with Yahoo has been closed. There is an attachment that appears like a valid link to Yahoo for the user to click on to reactivate their account.

For more information see:

http://securityresponse.symantec.com/avcenter/venc/data/w32.netsky.i@mm.html
Handler on Duty: Lorna Hutcheson