Bitsight has recently observed a 15-year-old modular spambot called Tofsee being distributed by PrivateLoader (ruzki), a notorious malware distribution service we also closely monitor.
Article Link: https://www.bitsight.com/blog/tofsee-botnet-proxying-and-mining