Still, it's the first time I see a worm exploit the CID in Outlook. This is very good way to fool user in opening attachement!