"Although the initial attack occurred when company employees visited a malicious web site, Alperovitch said researchers are still trying to determine if this occurred via a URL sent to employees via e-mail or instant messaging or some other method, such as Facebook or other social networking sites."<p>It still needed an employee to make the usual "install the dancing pigs"-style gaff while using IE6.<p>Also: Employees using IE6, inside Google, in 2010. Why weren't they using Chrome?