W32/Mydoom@MM spreads through e-mail. This worm can disguise the sender’s address, a tactic known as spoofing, and may generate e-mails that appear to have been sent by Microsoft or someone else. Many of the addresses Mydoom uses are valid addresses that are being spoofed for malicious purposes.
Here’s Microsoft’s security response.

