They were late for Christmas but early for New Year: We're already seeing New Year greeting card spam runs directing users to a malicious web site called uhavepostcard.com.
Right now there are no exploits on the site, but it tries to download a copy of Happy2008.exe to the user. Which is something you don't want.