Yaha Worm Spreads Beyond Middle East
A new variant of the worm, discovered last week in several Middle Eastern countries, propagates through e-mail, using its own built-in SMTP engine.A new variant of the Yaha worm, discovered last week in several Middle Eastern countries, has begun spreading more rapidly and widely, anti-virus experts say. Yaha.K is a mass-mailing worm and propagates through e-mail, using its own built-in SMTP engine. It can also retrieve addresses from Yahoo Messenger, MSN Messenger and .Net Messenger Service directories. The worm also is designed to launch a denial-of-service attack against a target server in Pakistan.
The worm appears in victims mailboxes with any one of dozens of subject lines. The "From" addresses on both the envelope and the message header are forged and the message also carries an attachment with a randomly generated name.