ANI Tues afternoon+10 minutes
I just swung by some iframer lures, and guess what .... they're now infective with the ANI 0-day. Not sure what that payload is yet, but they usually install a Rustok rootkit. They have a strong and large system of Lures, so this is a pretty good escalation of events. Good thing the patch came out today.
Naturally, LinkScanner users have little to fear, as it detects all the variants so far.