Feigning one type of attack to distract you while they commit a much more devastating attack is well within their capabilities. Another possibility is that an innocent piece of code masks a destructive worm. In other words, the bad guys might use smoke and mirrors to keep you from looking in the right places, similar to the way a stage magician will direct your vision to one hand while manipulating his props with the other. "They call it the python approach. They lie and wait for the right moment to strike." As predators go, pythons are remarkably patient and, once they decide the time is right to strike, they rarely fail. There are also some hackers with infinite patience. Many organizations already have time bombs in their systems, but do not realize they have been hacked because the event that will trigger the explosion has not yet occurred. “Better the devil you know than the devil you wear