German spam event [was: Re: Schily ueber Deutschland]

[Skip Montanaro]

    Bernd> Looks like another windows worm. Now they seem to come with a
    Bernd> more sofisticated 'payload'. I am sure that will increase in the
    Bernd> future.  It is just the beginning ...

Indeed.  This turns out to be the Sober.Q worm.  Sober.P infected gazillions
of machines with its "free world cup tickets" scam, but didn't directly do
anything.  Apparently Friday it started upgrading itself to Sober.Q which
sent out the massive spread of right-wing racist spam.  Mail.python.org was
receiving about 15 spams per minute for an extended period of time - at
least 12 hours, probably much longer - on Saturday.

Skip