MS03-011 = 2003 the eleventh advisory, the other one was from the year 2000. if you look at some of the newer ones like spoofing the mime type in the header., the advisory warns of getting "lured" to a malicious web site. this is done via a url sent to you in an email or IM. the hi-jackers dont lure per se except for maybe using porn, but they still pick up on the same exploit techniques as the trojan and virus writers use and incorporate them into the sites they pay to do this.