Hybris worm

[Philippe Bourcier <philippe () CYBERABUSE ORG>]

Hi,

I received a lot of mails from hahaha () sexyfun net with a 23k attachment and
I am sure some of you too.

After a search for more infos about it I found this analysis:
http://www.avp.ch/avpve/worms/email/hybris.stm

To be short, I would say it would be judicious for any admin to block mails
from hahaha () sexyfun net on the mail servers, because this new Windows "worm"
spreads using mail with this "from" address.

Philippe Bourcier
-------------------------------------
www.documents.cyberabuse.org