Authors of a particularly nasty piece of malware known as Storm Worm have yet again shifted their tactics. They are creating a flood of email hoaxes that try to install a bogus "applet" so victims can redeem membership benefits to clubs related to music, online dating and other interests.
The new emails bear subject headings such as "User info," "Membership support" and "Login information," and contain purported login credentials for sites that offer the gamut of services tailored to online music aficionados, cat lovers and poker players, according to this post by F-Secure.
Just as genetic mutations allow a particular type of caterpillar or breed of dog to better withstand virulent disease, the frequent changes in Storm improve its resiliency against attacks from rival criminal gangs and security providers. The tactical shifts are crucial since the success of Storm relies on the ability to dupe recipients into clicking on links and installing programs.