Whatever be the type of web malware, they typically spread via compromised PC/infected desktop PCs. Moost often becomes a soldier in a spam spewing botnet army or the users credentials are simply stolen with a key logger and the victim quickly becomes a victim of identity theft.