Security scenario analysis: identity without malware — failure modes, real-world examples, indicators and defensive countermeasures.