A Zeus botnet is targeting credit-card account holders who shop several major US retailers including Macy’s and Nordstrom. The attack is using a Zeus 2.1.0.8 botnet, the latest and most sophisticated version of the Zeus malware platform. Social engineering is used after an infected user logs onto one of the targeted retailers’s card services website and the botnet causes a man-in-the-middle-style pop up that says: “In order to provide you with extra security, we occasionally need to ask for additional information””]
Source: https://www.csoonline.com/article/2126406/zeus-botnet-targets-holiday-shoppers.html