Demaestro - 7:17 pm on Jun 11, 2010 (gmt 0)

[threatpost.com...]

There's a large-scale attack underway that is targeting Web servers running Microsoft's IIS software, injecting the sites with a specific malicious script. The attack has compromised tens of thousands of sites already, experts say, and there's no clear indication of who's behind the campaign right now.

Some analyses of the IIS attack suggest that it is directed at a third-party ad management script found on these sites.

Some high profile sites hit, The Wall Street Journal among them.

Anyone running IIS should make sure they are safe.

Analysis of attack
[blog.sucuri.net...]

[edited by: Brett_Tabke at 1:45 pm (utc) on Jun 12, 2010]
[edit reason] added sucuri.net link [/edit]