Just seen this on twitter from

===============================
Mikko Hypponen @mikko
Remarkable new Linux rootkit: http://blog.crowdstrike.com/2012/11/...x-rootkit.html … Capable of injecting malicious iframes into web traffic. Analysis by @ochsff
===============================

I am no expert and I would appreciate any informed comments