CERT just issued the alert at http://www.us-cert.gov/cas/techalerts/TA04-036A.html