There are a number of sources of information, but many do not provide any insights into their methodology or calculations. The ones that I would trust more would be ICSA 2001 prevalence study and the one provided by CSI and the FBI. Further, this sort of subject is discussed regularly by members of the Anti-Virus Information Exchange Network (www.avien.org).
For more information on this topic, visit these other SearchSecurity resources:
Best Web Links: Security research reports
Have a question for an expert?
Please add a title for your question
Get answers from a TechTarget expert on whatever's puzzling you.