Comment by scorxn

The norforge report sounds like they were targeting magento (e-commerce) sites to steal some $. Darn, was hoping they were trying to swipe DRM keys or something.