The flaw was detected on October 26th, when a number of compromised websites have started to plant malware on users` computers after visiting a specially-crafted webpage. The exploit code was written in JavaScript and was uploaded on http://l-3com[removed]. Some high-profile websites, including the Nobel Prize webpage, were compromised by iFrame injections which led the users towards the exploit. This technique, although not revolutionary, has also been used in the IE8 Exploit in January, commonly known as Operation Aurora.”]
Source: https://www.bitdefender.com/blog/hotforsecurity/0-day-bug-in-firefox-3-5-3-6-update-now/