Politica Estadaos website was loading iFrames that runs a brute-force attack against the victim’s home router. The malware tries a combination of known default credentials to access the admin console of the routers. Once infected a host could be recruited as part of a botnet attacks or could be used to serve a malware. Last year cyber security expert Dancho Danchev discovered an iFramed based traffic E-shops and the offer of access to hijacked legitimate traffic to be converted to malware-infected hosts.”]
Source: http://securityaffairs.co/wordpress/28272/cyber-crime/malware-change-router-dns.html