NEWS FROM THE LAB - Monday, May 16, 2005

More on Sober.q Posted by Jarkko @ 08:57 GMT

Sober.Q spam
We have received a lot of questions about origins of the recent Sober-related spam messages. Sober.p downloaded and activated Sober.q during last weekend. This new variant of Sober is the one sending out right-wing propaganda.

Sober.q also drops a file called Spammer.Readme. It contains this text:

  Ich bin immer noch kein Spammer!
  Aber sollte vielleicht einer werden :)
  In diesem Sinne

This is basically a message to Anti-virus industry claiming that "I'm not a spammer, although I might become a one!".