This worm phishing campaign is a game-changer in password theft, account takeovers

Once one email account was compromised, the credentials for the account were sent to a remote bot. The bot would then sign into the account and analyze emails sent within the past several days.