New Trojan exploits known vulnerability