Cyber-crime groups broke into a legitimate software solutions website to spread phishing and adware. The same domain is also hosting Trojans for further attacks. The bogus OnlineTTcopy attachment redirects to a phishing website that uses the images and login script of http://webmail.tr[REMOVED]ge.co.za/ to verify how many users have been duped. The spam is sent worldwide and even uses US dollars as online currency for the phishing page.”]