A little more than two weeks into 2008, cyber-criminals are up to their same old tricks — stealing users’ private data — but they have concocted a far more advanced and sophisticated method. They are now embedding their malicious code into legitimate Web sites using Web-hosting servers, according to a report released Monday by Finjan Software.