...there." Sunbelt’s company blog sports screen shots of several Google search results lists, with malware-infectingsites identified, as well as images of the bogus codec installation dialogs and the code of one of the malicious IFRAMEs...
http://www2.csoonline.com/blog_view.html?CID=33325
...The infection ratio stands at 16% from 3.1 million attempts – indicated by the web traffic volumes of the infectingsites. Finjan’s analysis indicates that the crimeware being used within MPack steals bank account information, such...
http://www.finjan.com/Content.aspx?id=1367