BleepingComputer.com: Massive Surge In Website Iframe injections

Quote

Source: The Register

I know that I've noticed an upswing in the number of sites I surf to being flagged as unsafe by Google Safe Search or blocked by my antivirus (Avast) as containing either "HTML:Iframe-GZ" or "HTML:Iframe-EJ."

An Iframe, for those not familiar with HTML, is an "inline" frame, an HTML element which can display a webpage or other document within a "parent" page.

These malicious Iframes attempt to download and run a malicious javascript document which can infect a target computer with such nasties as the Gologger keylogger and various trojan horse programs.

According to Google, this exploit has resulted in a more than doubling of their Safe Browsing Malicious Sites list. since January.

The Iframes are inserted into websites which use MySQL databases as a backend by means of an SQL injection attack. Websites based on popular blogging platforms such as Wordpress and Drupal, and even forums such as those using Invision Power Board and PHPBB may be vulnerable.

.....scary......

Just last week a customer of mine had this on their website, Google is still saying site may harm your computer. I wonder if it will reset itself somehow as it has been removed from the site.

There should be a button on the warning page that says something like "This ain't no baddie, buddy! Look at 'er agin!"

IFRAMES can and should be be blocked. All of them.
In IE in the miscellaneous settings.
In Opera they're calld Inline Frames.
Block and don't worry.