A new variant of Download.ject is in the wild, using instant messaging to spread. Like the first strain, this Trojan horse is designed to open backdoors and steal financial data.