After being thwarted by Google earlier this year, cybercriminals have shifted from “co.cc” to “ce.ms” as their preferred domains for hosting their malware. Security firm ZScaler noticed several “ce.ms” domains were hosting malicious code, along with JavaScript code obfuscated to evade antivirus software. “Attackers keep registering different random domains to…