Alva Review-Courier -

CHAMPAIGN, Ill. (AP) — A two-part computer "phishing" scam made to steal banking passwords attacked University of Illinois computer users and their off-campus email contacts from as far as Ohio.

UI Technology Services spokesman Brian Mertz tells The News-Gazette that the scam's first wave was an email saying the user had authorized a large payment. The email included an attachment that had a piece of malware that infected the user's computer and read its address book. The users' address books were used to send a second wave of emails with a fax attachment known as a "banking Trojan."

Mertz say...