A new campaign to lure users into downloading malware is running on the Waledac botnet, according to security researchers.