Windows 7: Mass injection attack compromised 20,000+ domains, delivers fake AV

A simple mistake on the part of cyber attackers has revealed another mass malicious iFrames injection attack that is currently under way, according to Armorize's researchers.

Initially, they forgot to include a tag before the actual malicious code, so it was indexed by Google and, therefore, searchable. The initial number of compromised domains was around 22,400, with a total of 536,000+ infected pages.

Unfortunately, the attackers remedied their mistake and the injected script is not visible to Google anymore, so the current number of affected pages is unknown.