Storm worm goes phishing

The dreaded Storm worm is now being used for phishing scams, according to security researchers.

F-Secure outlined a phishing scam involving the Storm worm (all resources) on i-halifax.com and noted that the site's IP address changed every second or so--it was hosted within a botnet.

Pretty crafty eh?

F-Secure says on its blog that:

"Somebody is now using machines infected with and controlled by Storm to run phishing scams. We haven't seen this before. But we've been expecting something along these lines."

Also see Trend Micro's take and Techmeme for more coverage.