Gumblar Malware Becomes Infectious Again With New Hosts

Last week the Gumblar malware was neutralized when the files containing its malware infection code were replaced with code that attempted to neutralize iframes. Today, those files have been modified to redirect users to files on other websites that contain the malware code. Like the original websites that hosted the malware code, these new hosts are websites that have been compromised by the malware. This is different than most attacks where the malware code is stored on a website controlled by the individuals behind the malware.

Related posts:

1. Gumblar Malware Code Replaced With Iframe Neutralizer
2. 640,000 Websites Estimated to be Infected with Malware in Q3
3. Google Adds Crawler View and Malware Details to Webmaster Tools