The virus arrives masked as a very serious, almost believable sounding message from PayPal, saying your account is about to expire. It asks for you to provide personal information including (surprise) credit card numbers. It even plays up on the security-minded, warning not to send your personal information through mail, but rather to run the attached file that will send the data directly to PayPal.

And that's when the "fun" starts.