218.213.77.96/a.js

a recent round of sql-injected link.
a.js links in more iframes which exploits the typical basket of exploits, targeting flash, IE7, snapshot viewer, realplayer, etc.

Ultimately the exploits installs a trojan [VT analysis]

Leave a Reply