Perhaps a better link here:

http://www.sophos.com/blogs/gc/g/2009/11/20/hackers-steal-in...