There’s a mass spamming underway right now. Somebody is sending out thousands of emails spoofed to be from “David Adams, Dept. Research, F-Secure Development (firstname.lastname@example.org)”. Some emails were also spoofed from email@example.com or from firstname.lastname@example.org.
These emails contain a new variant of the Breplibot worm. We’re right now shipping detection for it as “Breplibot.ae”.
The emails are not sent from our network, they are just spoofed to look like they are coming from a F-Secure address.
Source: F-Secure Blog