Here is an interesting story about user behavior when it comes to security. This was an experiment with a different kind of trojan horse delivery.
Proof: Employees don’t care about security
An experiment carried out within London’s square mile has revealed that employees in some of the City’s best known financial services companies don’t care about basic security policy.