Only 9 antivirus programs found the hack. In brief the sites that were hacked were all legitimate sites where nasty code was inserted to give unsuspecting visitors a nasty little unwanted present. The present came in the form of what is called a drive-by download.

Basically what the code did was inject an illegitimate iframe into the page code which contained a malicious executable. See the screenshot here at Websense

Tweet

© 2011, The Brass Monkey Blog . Net. All rights reserved. Feel free to use any or all of this post in your blog. However a link back to us would be appreciated =)