“It displays a fake Windows Live Messenger Login Screen and prompts for login details. Username and password are captured and stored in C:\pas.txt,” explained Sophos senior technology consultant Graham Cluley.

According to The Register, “Sophos named the malware ‘MSNfake-M’ and added protection against the code to its security software packages. Other anti-virus firms can be expected to follow suit.”