The Proofpoint security firm reports that attackers have shifted the focus of the powerful Dyreza malware tool to operate outside of the banking sector. Dyreza gained fame as a man-in-the-middle banking trojan used to steal passwords for online banking accounts. Proofpoint reports that Dyreza is increasing attacking fulfillment services for online shopping sites.

According to a report in the Register, Dyreza uses “Word macros to compromise phished users in what is an old attack vector that has gained latent popularity.”