Hijacked web server used for drive-by malware installations. Deceptive web pages planted on hundreds of sites load a set of Java Scripts which in turn attempt to load a malicious webpage.
In this case it is located on tornados.de
Gary Warner links this to the Zeus bot, which steals passwords, and was recently involved in the arrest of a group of Ukrainians whole stole over $70 million from US companies.
*****
See more of the description of this problem at
*****
*****