A flaw in Microsoft IIS servers led to compromised webservers redirecting visitors to a malicious website hosted in Russia. That site exploited additional flaws in Internet Explorer, forcing downloads of Trojans onto the hijacked visitors' systems.
Full story