Malware writers behind the Storm worm have launched a new spam campaign designed to bring more users into its extensive botnet.
The latest round of emails are disguised as greeting cards and contain subject lines such as 'Your ecard joke is waiting,' 'You have an ecard' and 'We have a ecard surprise.'
The body of the message contains a text link leading to a web page advertising an online 'greeting card' supposedly sent to the user.
On clicking either the image or the link, the user downloads an executable file that installs the Storm malware.
Infected machines are then connected to a customised peer-to-peer network which is used to control the botnet and install new versions of the worm.
As Storm's run nears 14 months, security companies are stepping up their efforts to slow the worm.
ThreatStop has made its normally private list of blocked Storm domains available to the general public, allowing users to copy the list and use it with firewall software to block traffic from known Storm distributors.
"We are taking this action because our users and test beds have seen that a significant amount of Storm worm traffic is blocked by the DShield lists that we propagate," said the company.
"When the internet as a whole is under assault like this we, as good netizens, should do our part to help."
Dr Kuan Hon criticises GDPR consent emails that will only eviscerate marketing databases and 'media misinformation'
Apple squashes Steam Link app on 'business conflicts' grounds
Philip Hammond wants to forget rules that the UK agreed with the EU to ban non-European companies from the satellites
Instapaper to 'go dark' in Europe until it can work out GDPR compliance