What is the relevance of iframes and javascript in malware injection?
In malware injection scenarios, hackers take advantage of vulnerable Web applications to inject malicious iframes into otherwise legitimate – and typically popular – web pages. The injected iframe will either use standard HTML syntax or can be in the form of javascript which will dynamically create the iframe when the page is displayed in the browser.