It's been known for years that the web is the distribution mechanism for the large majority of malware. While e-mail is still heavily used to lure users, the e-mail contains links to the web, not attached malware.

Source: PC Magazine