A worm Win32.Worm.Coidung.B disguised as Office Genuine Advantage, a program Microsoft used to validate copies of Microsoft Office was found by BitDefender Antivirus Makers research team.

“Microsoft retired Office Genuine Advantage in December 2010, but that hasn’t stopped the attackers from using it to ensnare victims a year later,” writes SecurityNewsDaily.

“The fraudulent OGA program, labeled ‘office_genuine.exe,’ is spreading via Yahoo Messenger, and once the attachment is downloaded, it opens a portal in people’s computers for remote attackers to control the machines or install more malicious software”

Source: Security News Daily
Source: Malware City