Worm variant targets PayPal users