Merry Christmas to you all from Prevx Research Lab.

As expected, malware writers aren't busy buying presents for friends, girlfriends, boyfriends, parents. So they have enough free time to release new targetted attacks on Christmas day.

I'm talking about the team behind Storm worm, who decided to release new variants of the malware just for this Christmas period.

Outbreak started almost two days ago, and is still going on. We're almost the last to release informations about the new worm on our blog, because we spent some time analyzing the new malware and all polymorphic variants of it, adding generic definitions and only after this we decided to write this post.

Yes, because the infamous team - as we have already seen before - is releasing new variants of the worm every few minutes, repacking the code from server. This slowed down a bit our job to add a valid signature. All variants are detected as: Stormy:Worm-All Variants

Anyway Prevx users were already protected since beginning of the outbreak thanks to our behavior analysis module that proactively blocked the infection.

We wish you again a merry Christmas.