Storm Worm has been the worm-du-jour since the end of the summer and by all accounts it's a bad one.

At first, the evil botnet was merely being used to spread spam. (which is bad enough). But now, Ars Technica (great site by the way) is reporting that its being used to launch denial of service attacks directly on those investigating it. In his keynote address at the New York INTEROP Conference this week, Josh Korman from IBM told attendees that Storm Worm is now launching retaliation attacks on any IP address that tries to delve into its servers.

This at the same time other security groups say the number of attacks are way down since the worst of it last month. Apparantly Microsoft's security patch that it posted back on September 11th covered most Windows users (and thus just about every computer user on the planet).

Reporting being what it is online, numbers of infected computers range from 15 million to, well uh, 20,000.

I would be remiss if I didn't say one more time, when you get funky email don't open the attachment or click on the links. Storm Worm's hook is a link in the email. Don't bite, unless you know what you're sinking your teeth into.