The 0Day marketplace was a busy beaver last weekend. I was sitting down below watching Sphinx for 10 days to see if the 0Day admin would verify this new threat, and he did...When the admin of 0Day verifies a threat - it's the real deal. The developers said that "Sphinx is designed to work on Windows Vista and Windows 7 with User Account Control (UAC) enabled, and it works even on user accounts with low privileges, such as the “Guest” account." This baddie is immune to sinkholing, blacklisting, and the ZeuS tracker.It has a boatload of other features and you can read more about it at the Norse Darkmatters blog and Security Week..