Enterprise Strategy Group surveyed 315 North American-based IT security professionals. Majority of respondents have seen an uptick in more sophisticated and targeted malware attacks over the last 24 months. 62 percent of organizations surveyed said endpoint security software is not effective for detecting zero-day and/or polymorphic malware. Most likely avenue for a malware attack, and cause for successful malware attacks, was lack of user knowledge about cyber security risks. It takes 57 percent of respondents hours to detect that an IT asset has been compromised by malware.”]