Cybercriminals do not need administrative users
Secunia
For years the software industry has promoted reduced privileges for user accounts as a key security best practice to prevent misuse and successful exploitation of end-point systems. There are two main rationales/assumptions that back up this strategy: A) malware requires administrative access to successfully exploit and compromise a system, and B) users without administrative access are prevented from bypassing the organisation’s security policy as they cannot install and run unauthorised programs on their own.
