"The main infection method was email messages luring victims to web sites running a variety of exploit kits," according to the report. "The victim would typically receive an email message from a business or the government informing them of an issue with their account. This would contain a reasonable looking link to a web site. The web site would actually host an exploit ki...



