"Storm worm" Trojan on the loose

A Trojan horse attack known as the "Storm Worm" has taken home PC users by, well, storm. The attack is distributed through emails that purport to contain information on recent news stories. When an attachment is opened, a rootkit is installed on the local drive that adds the host PC to a botnet. "When they first came out, these files were pretty much undetectable by most antivirus programs," said Mikko Hypponen, director of antivirus research at F-Secure. "The bad guys are putting a lot of effort into it--they were putting out updates hour after hour." If you don't automatically strip attachments out of emails, you may want to warn your users before it's too late.