Brian Ewell's blog

Security Response has confirmed reports of a worm spreading through email under the subject  "Here you have". The mail to the unsuspecting recipient claims to be providing a document available through a URL. The URL is spoofed and actually points to a malicious binary being hosted on a different server.

The email will appear similar to the following: