http://news.zdnet.com/2100-1009_22-5...=zdfd.newsfeed

most of which rely for their proliferation on ignorance of their existence among users and IT administrators.
the best way to help people protect themselves is to instill the same distrust regarding Web links or attachments sent via IM that they have been taught to apply to e-mail.
Which do you think is the greater culprit, in this case, the software or the user?

From most of what I've read it doesn't seem like the client software has been exploited until the user took ill advised action.