Malware

Researchers said that domain names associated with the attack infrastructure were shut down soon after the spy campaign came to light.

The updated trojan contains a new plug-in that can carry out a slew of malicious functions in the VoIP service.

Zaxby's, a Georgia-based restaurant chain, said the credit and debit card information of customers at locations in 10 states may have been accessed by fraudsters.

The concept of "bouncer list phishing" is designed to keep everyone, except a select few, on the outside of the campaign.

In addition to using vulnerabilities in Microsoft Office products, attackers behind the cyber espionage campaign used a Java exploit, which has had a patch available since 2011.

This may not be the first time Virut has been used to spread the Waledac worm, whose goal is to earn money for its purveyors through rogue ad networks, online pharmacies, or outright fraud.

Researchers at Kaspersky believe the Red October campaign, which is spreading a data-sucking trojan known as Rocra, dates back at least five years, and is still ongoing.