As more organizations are heavily filtering or limiting employee email and Internet access to prevent phishing and other Web-based attacks, attackers are identifying other ways to fool their victims into visiting malware-laden websites.