If you receive an email claiming to contain an online statement from credit card issuer Visa, you should delete it immediately, security experts have said.
Facetime Security wrote on its SpywareGuide Greynets blog that it had seen a scam email in circulation with a link to a webpage containing what looks to be a credit card statement but is actually the Zbot banking Trojan, also known as Zeus.
The webpage appears to be on a .co.uk site but is actually hosted in India. If you should download and install the file, your PC will then contact a known Zeus command and control server.
"Never, ever download an executable file mentioned in an email claiming to be from your bank – you'll end up in a world of hurt," said Christopher Boyd of Facetime.
However, Boyd did say that because the Trojan had been around for some time, most anti-virus solutions detected it and protected against it.