...Web-based attacks became the primary threat vector in 2009, cyber criminals focused on exploiting vulnerabilities inlegitimate websites - rather than create new, malicious websites - to steal personal data and confidential information from...
http://www.insight24.com/webcasts/content-149628_1