The latest trick Nuwar (aka Storm) plays looks like this:

Like previous variants, the HTML page contains a script that attempts to execute the malicious file hosted on the webserver. However even if this exploit code gets blocked by AV software or not executed at all because of security settings in the browser - the user still has the option to click on the download button and infect their machine.

Make sure you’re protected so you do not join the Storm network!