Earlier tonight we released an urgent update for Trojan-PSW.Win32.Sinowal.u.

Sinowal is a family of password stealing Trojans which steals usernames/passwords entered via forms in an internet browser. It particularly targets certain banking domains and also has the ability to steal other locally stored passwords.

...spam with a password-stealing Trojan...uses a German-language pitch, saying the malicious attachment is an official Microsoft Windows update...If a user visited the site without a properly patched browser, the software would install itself, allowing it to harvest login and password information for some European banks' sites,...