Security vendor mass-mails worm to clients