F-Secure issued its first Radar Level 1 alert for many months in response to the spread of Sober.Y. Sober.Y is written in Visual Basic and sends e-mail messages with English and German texts and its file attached. The attachment is a ZIP archive containing the worm's executable. Some of the email messages pretend to be from the CIA, FBI, or the German equivalent the BKA.