The latest IBM X-Force Trend and Risk annual report has confirmed an increase in web-based attacks, with cybercriminals using legitimate corporate websites to push malware and steal confidential data.