Storm is Back!

After 2 very quiet months the Storm gang seems to be back in business.
Shortly after 0000 GMT 24-DEC-2007 reports came in indicating that the Storm Botnet was sending out another wave of attempts to enlist new members. This version is a Christmas-themed stripshow directing victims to merrychristmasdude.com.

The message comes in with a number of subjects:
Subject: I love this Carol!
Subject: Santa Said, HO HO HO
Subject: Christmas Email
Subject: The Perfect Christmas
Subject: Find Some Christmas Tail
Subject: Time for a little Christmas Cheer

Updated subjects:
“Merry Christmas To All”
“Warm Up this Christmas”
“Mrs. Clause Is Out Tonight!”
“The Twelve Girls Of Christmas”
“Jingle Bells, Jingle Bells”
“Cold Winter Nights”

The body is something similar to:
This Christmas, we want to show you something you will really enjoy. Forget all the stress for two min and feast your eyes on these. ;-) http://merry christmasdude.com/

But that's not all ... I also saw another zipped sample sent straight to one of my honeypots with a subject 'Merry Christmas' and an infected 'ecard.zip' attached!

Be very carefull these days as scanners are less updated and the infected samples can pass easily!!

A Merry Christmas to you all!