Ever-changing malware threats lurk on the web, but the same old attack vectors are still quite viable.