Sophos has detected two types of scams recently. The first one is about an ecard and the second one is about Russian Brides.
The ecard scam lets the user know that someone sent them an ecard with a “dear friend” message included in the ‘To’ field of the address. It contains a link to a site that ends with a .exe extension. Sophos notes that it is Troj/Meredr-Gen.
The Russian Bride email lets the user know that he (the sender) is sending a letter to his bride (supposedly the user). He wants you to send money and there is also an attachment which is the same type of file as the attachment in the ecard spam.
Source: Sophos

Articles
Blogs
Kits
Forums
Lee
I just dealt with the e-card one this morning. The link even shows the .exe, why on earth would anyone click it? Well, my client did.