“According to reports, surfers are now almost always attacked from the hacked web sites of legitimate providers. Previously the general assumption was that malware was only found on sex sites and other shady web sites, but these days all you need to do is visit the site of your favourite newspaper to come under attack.”
Trojan attacks now almost solely from legitimate websites – The H Security: News and Features.