The Javascript code is hosted in the Clientside Developer Blog and will attempt to get on visitor’s computers by inserting itself through improperly patched browsers using an iFrame attack.
The malware uses a known integer overflow vulnerability in Adobe Flash.
Software that is vulnerable includes Adobe Flash Player, 9.0.115.0, and previous, Adobe Flex 3.0 and Adobe, AIR, 1.0
_(20).jpg&h=140&w=231&c=1&s=0)
_(26).jpg&w=100&c=1&s=0)
iTnews Executive Retreat - Security Leaders Edition
_(1).jpg&h=140&w=231&c=1&s=0)
