Halifax website for managing money online transfers has been phished yesterday. The IP address of the site was changing every second and as analyzes reports that some of random IPs were addresses to sites such as hellosanta2008.com. postcards-2008.com, which suggest this attach can be Storm. As Data Security reported there were evidences of Storm variations using unique security keys. The unique keys will allow the botnet to be segmented allowing “space for rent”. It looks as if the Storm gang is preparing to sell access to their botnet.