Spam postcard delivers surprise

A spam postcard is making the rounds can deliver an unwelcome message if opened, said security research firm Sophos on Tuesday. The malicious postcard has the potential to engage in identity theft should Windows users click on the embedded Web site link.

The spam postcard spoofs the name of a friendly sender and prompts the recipient to click on a link to a Web site presumably presenting the postcard, according to Sophos. But users receive a nasty greeting when a Trojan horse on the link installs malicious code on the user's computer by exploiting a flaw in Internet Explorer. The code allows the attacker to steal personal information that may be stored on the user's machine.

[aabcdefghij987654321]

Lack of details - very poor article

And what does the postcard look like? Are there any identifying characteristics that one should know in order to be able to tell this postcard from a legitimate one?

Why write stories like this warning but then not provide any useful information to help people protect themselves?