Google's newly-formed Anti-Malware Team claims that IIS servers are more than twice as likely to host malware than any others. Nagendra Modadugu, of Google's, based his claims on an analysis of 70,000 domains that were either distributing malware.
Security experts talking to secure computing said that was bad news for the industry as it created a situation where visitors to the site may have been attacked simply by accessing the site.
More here