Massive drive-by download has infected more than 90,000 sites. The malicious domain is shown in the blog: willysy.com (do not visit) The attack targets osCommerce sites used by over 249,000 online store owners. This includes multiple browser exploits. Infected website is injected with one of several scripts: Browser loads http://://://papucky.eu/ext/ and redirects to http://arhyv.ru/9VBMa76FFnB4VAYu0X5j755pMiSyVrcV. After successful exploitation, browser downloads and executes malware from here:”]