A new wave of spam claiming to be a money transfer notice from western union is delivering a nasty piece of malware-a keylogger. The email claims over $3,000 has been transferred to the recipient and includes a tracking number. The keylogger is contained in a Trojan posing as a transfer sheet attached to the email. When downloaded it captures personal information such as usernames and passwords and sends them to a hotpop.com address. The attack isn't very sophisticated-the attachment is an .exe file which most users know better than to open and most email clients block by default.