I am surprised that we have not seen this before. I am going to have to some research as I cannot imagine a virus writer not having put in a Network Sniffer before. But the results are no less ominous in that worms now are tracking keystrokes, collecting network stream data etc. I wonder if this is an attempt to steal banking data when people are doing transactions on non-secure sites? [ZDNet]