Malware goes regional as attackers change tactics