Submission + - ZeuS Takes Shots at U.S. Military Personnel (securityweek.com)
No matter what user name and password entered by the victim, they are taken to a page, which contains the Update Tool malware that is says users must install in order to prevent their banking account from being locked.
ZeuS, also known as Zbot, WSNPOEM, NTOS and PRG, is the most prevalent banking malware platform for online fraud, and has been licensed by numerous criminal organizations. The program then waits for the user to log onto a list of targeted banks and financial institutions, and then steals login credentials and other data which are immediately sent to a remote server hosted by cybercriminals. It can also modify, in a user’s browser, the genuine web pages from a bank’s web servers to ask for personal information such as payment card number and PIN, one time passwords, etc.