In particular, phishers are increasingly planting keyloggers -- malicious programs that spy out keystrokes, sometimes only those keystrokes associated with logging on to an online banking site -- to filch identities. From November through December 2004, Websense found a weekly average of 1 to 2 new phishing keyloggers and 10 to 15 sites hosting the Trojans that carried the keyloggers. By February and March 2005, however, those numbers had multiplied five to ten times: Websense saw 8 to 10 new keyloggers and more than 100 malicious sites hosting them each week during those months.