Criminal gangs are selling malware source codes to exploit flaws such as the recent WMF vulnerability in a worrying new trend.