User education is very important but realisations need to be made that malware threats will evolve