Stealthy New Click-Fraud Malware Related to Tor BotnetMicrosoft reports having discovered a click-fraud component to the Sefnit malware, thought to have disappeared in 2011. It has also linked Sefnit to the Mevade Tor botnet.
Source:
Stealthy New Click-Fraud Malware Related to Tor Botnet