With regular users in mind, how much of a problem is social engineering these days? A couple years ago some Cisco researchers infiltrated a botnet and got to i

With regular users in mind, how much of a problem is social engineering these days? A couple years ago some Cisco researchers infiltrated a botnet and got to interview the operator. They asked him what vulnerabilities he uses to grow his network, and he said none: http://www.cisco.com/web/about/security/intelligence/bots.html http://www.cisco.com/web/about/security/intelligence/bots.ht... Instead he spams instant messaging networks with "check out this cool software: [link]", and he could count on 1% doing it. This is the sort of thing my parents and grandparents fall for. Combine it with social networks and the message appears to come from a trusted person. For this reason I'm glad to see the arrival of curated app stores, despite their many drawbacks. For regular users I think it will make it harder to be tricked into voluntarily installing malware. But I don't know how significant this problem is compared to not staying patched.