Multi-platform Backdoor Lurks in Colombian Transport Site – F-Secure Weblog : News from the Lab.

Note how this works.  The bad guys need your confirmation in order to proceed.