Security researchers at the SANS Internet Storm Center (ISC) have discovered a utility that served as the foundation for a series of attacks that compromised thousands of websites and infected millions of users' PCs over the past several months.