US-CERT is aware of a report that states that the Storm Worm is now spreading via spam email messages that contain links to medical sites. If a user follows one of these links to an infected site, the user's machine will be infected with the Storm Worm. The links contained in the email message may use redirection strategies to evade spam filters.  

US-CERT urges users and administrators to take the following preventative measures to mitigate the security risks:

•     Install anti-virus software, and keep its virus signature files up-to-date.
•     Block executable and unknown file types at the email gateway.
•     Refer to the Recognizing and Avoiding Email Scams document for more information on avoiding email scams.
•     Refer to the Avoiding Social Engineering and Phishing Attacks document for more information on social engineering attacks.