The Storm worm has once again made its presence known, this time with a New Years themed attack. Victims receive emails with such subject lines as: "As you embrace another New Year" "Blasting New Year" "Happy 2008" "Joyous new year" "New Hope and New Beginnings" "New Year Ecard" "New Year postcard" "Opportunities for the New Year" "Happy New Year to You" "Happy New Year to...", and "New Year Wishes for You." Links in the spam mails direct the recipients to a malware site called uhaveapostcard.com. This latest attack follows a similar Christmas themed one that occurred on Christmas Eve and used a strip tease to lure users to merrychristmasdude.com, another malicious website. A google search of that domain brings up several splogs that redirect to siski.cn, which itself redirects to another malware site that attempts to install a fake video codec which is a malicious downloader in disguise.

Attacks like this are becoming more and more common. Make sure your users understand how important it is to never click on links in emails from people they don't know, and keep those spam filters updated!