Storm Spreads Under Love Theme Again

Over a week ago MX Logic wrote in their security blog about new Storm worm variant claiming news of a new earthquake in China. Now a bunch of new domains has been added to spread Storm. Theme of Storm spam messages has been changed to love which is common theme for earlier Storm variants.

Below is an example of these new Storm messages:

From:
Date: 2008/6/29
Subject: Missing you


Missing you hxxp://latinlovesite.com/

Thus far identified domains are:

theloveparade.com NS ns5.lollypopycandy.com
latinlovesite.com NS ns5.lollypopycandy.com
youronlinelove.com NS ns5.lollypopycandy.com
yourloveletter.com NS ns5.lollypopycandy.com
makinglovedirect.com NS ns5.lollypopycandy.com
lollypopycandy.com NS ns5.lollypopycandy.com

It's difficult say how long this new theme will be used. China earthquake theme lasted from 6/18/2008 to 6/27/2008 so this new 'old' theme may not last much longer either.