Amnesty International’s Hong Kong site, amnesty.org.hk, is serving up a cocktail of malware that includes last week s Internet Explorer 0-day. The site is launching iframe attacks that forward unsuspecting users to a server hosting recent Flash, Quicktime and Shockwave vulnerabilities. Microsoft hasn t said when they ll patch theirs, but it hasn’t ruled out an out-of-band fix. The attacks are similar to those last month when attackers were found using drive-by download attacks to serve malware via the Nobel Peace Prize website.
Source: https://threatpost.com/amnesty-international-site-found-hosting-malware-ie-zero-day-111110/74666/