Threat is spreading widely via spam campaigns, infecting systems with a new malware loader.