Trojan.Spammer.HotLan.A uses automatically generated email accounts, suggesting that spammers have found a way to bypass so-called Captcha systems.
Captcha works by preventing new accounts being created until the creator correctly identifies the letters depicted in an image.
Every active copy of the Trojan accesses an account, and pulls encrypted spam emails from a website. It then decrypts the emails and sends them to valid addresses taken from yet another website.
"There are only about 500 or so new accounts being created every hour," said Viorel Canja, head of BitDefender's antivirus lab.
"But we have seen at least 15,000 Hotmail accounts being used so far. It is hard to estimate how many spam emails have already been sent."
The spam currently being distributed attempts to lure users to a site advertising pharmacy products. Common spam techniques are used in the email body, such as random word generation and a random email subject.
Cotton seedling freezes to death as Chang'e-4 shuts down for the Moon's 14-day lunar night
Fortnite easily out-earns PUBG, Assassin's Creed Odyssey and Red Dead Redemption 2 in 2018
Meteor showers as a service will be visible for about 100 kilometres in all directions
Saturn's rings only formed in the past 100 million years, suggests analysis of Cassini space probe data
New findings contradict conventional belief that Saturn's rings were formed along with the planet about 4.5 billion years ago