Mystery infestation strikes Linux/Apache Web sites

[NoOp]

On 01/25/2008 07:49 AM, Miano, Steven M. wrote:
> http://www.linux.com/feature/125548
> 
> Has anyone else checked to see if their system is infected with this
> rootkit as of yet?
> 
> I am unfortunately monitoring my network traffic, and fortunately not
> seeing anything at the moment.
> 
> ~Steven

My guess would be that it's an iframe exploit via php and possibly cPanel.