I have heard of trojans that are sent thru hotmail and other online email services and capture passwords if they are replied to. Something like that. How do they work?

with respect
Pythras