The Dark Visitor

Now I wonder what group would do a thing like this?  Once again from the amazing Danchev on IE7 XML parsing zero day exploited in the wild:

Despite that the malicious domains remain injected at legitimate Chinese sites and forums as iFrames only, this could easily change so that more legitimate international sites start getting targeted. What are they after this time? Passwords for popular online games in China.

Tags: Chinese games, IE7, Zero-Day