After Sober Comes Mytob

Not to be left behind by Sober, an influx of emails made Mytob in the news again, this time with something new. Trend Micro has declared a medium risk alert for WORM_MYTOB.MX.

What made this Mytob unusual is that it drops another malware. This worm has all the usual Mytob characteristics – a mass mailer, propagates via network shares, has backdoor capabilities, and sets the affected system as an FTP server. It uses the same email template that other later Mytobs had used, so there’s nothing new in that area. It still makes your system vulnerable to a remote attack.

Again, delete emails with suspicious attachments. Use an antivirus if you can.