Well, that’s not particularly unusual in itself, except that it’s been flagged by the Internet Storm Center as (a) happening right now and (b) escalating somewhat dramatically: in fact, it appears to resemble the lizamoon attack which was reported as affecting around a million sites earlier in the year.
According to Mark Hofman, if you’re in a position to block the lilupophilupop.
Hat tip to Conny Javerdal for bringing this to our attention on the AVIEN list.
David Harley CITP FBCS CISSP
ESET Senior Research Fellow