Skip to content

J-Security Center

Latest Attack Object Updates
  • IDP Daily Update #1250
    posted: 08/27/08
  • NSM Daily Update #1250
    posted: 08/27/08
  • Deep Inspection 5.3r5 and above, 5.4, 6.0 #1250
    posted: 08/27/08
  • Deep Inspection 5.1, 5.2, 5.3r4 and below #1227
    posted: 08/27/08
  • Deep Inspection 5.0 #1132
    posted: 04/01/08
  • Antivirus
    posted: 08/26/08

Email-Worm.Win32.Sober.y


23 Nov 2005 14:09:00 +0300

Kaspersky Lab has detected a large number of samples of Email-Worm.Win32.Sober.y, which is currently spreading actively in Europe. There are also reports of the worm spreading in the USA.

The worm spreads as an attachment to infected emails, and sends messages in English and German. It uses a variety of message subjects and message texts. English messages may have the FBI as the sender; German messages may have the Bundeskriminalamt as the sender.

The worm will display a fake error message when launched.

Further information about Sober.y will be available in the Virus Encyclopaedia in the near future.

Detection for Sober.y was added to the Kaspersky Anti-Virus databases on November 16th. Users are recommended to ensure that their antivirus databases are up to date.