Writeup on nbc.com distributing Citadel malware

The blog reports a drive-by compromise of NBC.com where an injected iframe redirected visitors to the RedKit exploit kit that served Citadel banking malware (malicious JAR/PDF). The malware was configured to manipulate traffic for a long list of US financial institutions, had low AV detection at the time, and was active for several hours; the post includes example malicious URLs and a brief timeline.