The malicious module our experts are calling OWOWA integrates into IIS Web servers and steals mail credentials.