New worm debuts

We’ve been waiting for the other shoe to drop for several weeks, and today it finally did… with a bang! W32.Novarg.A@mm made its debut this afternoon/ See Symantec’s report for more info. Today we received almost 10,000 messages that were infected with Novarg. We block all executable attachments, but this one also sends itself as a Zip file, waiting for people to open the Zip and then open the attachment. It takes advantage of the fact that most systems let Zip files in so that people can transfer legitimate files that would otherwise be blocked by filters.