Compromised Wordpress web sites have been sending visitors to malware hosts that infect Mac OS X systems with the Flashback Trojan, security outfit Kaspersky Lab has reported.



From The Inquirer:

Kaspersky said in a report that infected Wordpress blog web sites were hijacked to push visitors to malware hosts. The blog web sites could have become infected when naive administrators installed a rogue Wordpress utility called Toolspack. That inserted a simple script on the web sites capable of redirecting vulnerable users to malware hosts.

  Flashback Trojan spread by Wordpress web sites