Spyware stages ‘significant counterattack’