Kaspersky sends us this:

"General News. Friday, October 31, 2003
******************************************************************

1. New Mimail Worm Promises Exotic Photographs & Harasses E-Gold
2. How to subscribe/unsubscribe
3. Security Rules

****

1. New Mimail Worm Promises Exotic Photographs & Harasses E-Gold

Kaspersky Labs, a leading data security software developer, reports the
detection of Mimail.c - a new modification of the infamous network worm,
Mimail. There have been numerous registered reports of infection from
this malicious program.

Mimail.c is a classic e-mail worm, spreading via email messages
containing the following characteristics:

Sender address: james@recipient's domain

Subject: Re[2]: our private photos

Message body: Hello Dear!, Finally i've found possibility to right u, my
lovely girl All our photos which i've made at the beach (even when
u're without ur bh) photos are great! This evening i'll come and we'll
make the best SEX

Right now enjoy the photos. Kiss, James.

Attachment: photos.jpg.zip

It is interesting to note that the sender address of infected messages
is formed with the domain of the recipient. This tactic makes it harder
to localize the infection epicentre and may give recipients the
impression that the message came from a colleague or acquaintance.

If someone carelessly opens the infected file attachment and launches
Mimial.c, the worm installs itself into the computer and proceeds to
spread through the network.

Mimail.c has the added ability to cause significant damage to those
using the E-Gold payment system. The worm traces the activity of E-Gold
applications installed on infected machines, records from them
confidential data, and send this information out to several anonymous
email addresses owned by the worm's creator.

Additionally, all infected computers are exploited to carry out a
distributed DoS attack on the www.darkprofits.com and
www.darkprofits.net web sites, sending to them an endless cycle of
random data packets."