This malware spreading tool is back with some new tricks