According to Trustwave, the email campaign distributing Vidar is not very sophisticated. The email contains a generic subject line and an attachment, “request.doc,” which is actually a .iso disk image.