Attackers frequently send malicious JavaScript files through bogus emails. It's easy to block these files from reaching a hapless user. Here's how. There have been several recent reports of fake ...
JS probably isn't the way to go. Probably a better way would be to write an app with an embedded IE window.