Malicious Code That Modifies Web Pages

In the last six months of 2007, 7% of the top 50 malicious code samples modified Web pages -- up from 3% in the first half of the year. In the second half of 2006, none of the top 50 malicious code samples attempted to modify Web pages on the compromised computer. It is likely that the success of threats like the MPack kit has encouraged attackers, in recent months, to use Web pages to install malicious code.

Source: Symantec Internet Security Threat Report, Vol. XIII