W32/Lebreat-A is a worm with a backdoor component for the Windows platform.

W32/Lebreat-A spreads by exploiting the LSASS vulnerability.

W32/Lebreat-A will send itself to email addresses harvested from the infected computer. These emails will have the following properties:

Subject:

**WARNING** Your Account Currently Disabled.
Email
Error
Hello
Importnat Information
info
Mail Delivery System
Message could not be delivered
Password

View the message text and other information at this Sophos page.