Malware is being distributed by reading malicious obfuscated JavaScript code stored in a PNG file’s metadata to trigger iFrame injections.

Most modern browsers, like Firefox, Safari and Opera, offer support for PNG images with full alpha channel transparency. Even Internet Explorer 7 has gotten in on the PNG transparency act, which ...