We upgraded the recent four Sober variants found during the last 24 hours to Radar level 2.

Meanwhile another new Sober arrived. We are publishing detection right now to detect it as Sober.X
 
 
Edited to add: The attack continues. We just got multiple customer submissions of another variant with variable MD5. Detection is being added as Sober.Z.