With the integration of the IMlogic Threat Center, Symantec Security Response includes the industry's first global consortium to provide threat detection and protection for IM threats. The findings in this paper are based on research and analysis of reported incidents and events on the global IM networks. Incidents reported to Symantec Security Response included open forum submissions from the general public, Symantec enterprise customer events, and events from the Symantec Global Intelligence Network. The Symantec Global Intelligence Network consists of more than 40,000 sensors monitoring network activity in more than 180 countries and comprehensively tracks attack activity across the entire Internet. Symantec also gathers malicious code data along with spyware and adware reports from over 120 million client, server, and gateway systems that have deployed the Symantec antivirus products.