Some 50,000 websites have been compromised as part of a sustained iframe injection attack campaign. The majority of the sites being targeted are running Plesk Panel version 10.4.4 or older versions. At least 4000 new websites were infected each day, according to Sucuri malware researcher Daniel Cid. Researchers say at least 4000 sites were infected every day. This zero-day exploit for Plesk is being sold on the black market for around $8,000 per purchase. It’s unclear whether this claimed exploit is related to a rash of recent attacks against Plesk installations.
Source: https://thehackernews.com/2012/07/plesk-zero-day-exploit-in-wild.html