An update on the malware problem at NYTimes.com:

Over the weekend, The New York Times Co.’s site, NYTimes.com, was victimized by what appeared to be a legitimate advertiser — whose ads suddenly attacked site visitors with aggressive adverts that appeared to be virus warnings, the Times reports.
“The culprit masqueraded as a national advertiser and provided seemingly legitimate product advertising for a week. Over the weekend, the ad being served up was switched so that an intrusive message, claiming to be a virus warning from the reader’s computer, appeared,” explained spokesperson Diane McNulty.
As a result of the infiltration, NYTimes.com has suspended all ads that are inserted automatically by third-party ad placement firms. It also posted warning of the attack.
“We now know how it occurred and have taken steps to prevent a similar situation from happening,” stated McNulty.

Although a NRO reader emails in a slightly different story:

I was reading Frank Rich yesterday and clicked on an embedded link in his piece to another NYTimes piece. And then I started getting an autodownload of anti-security software, and I did NOT click on anything in the article or on the page. It was something in the code of the page itself, not an ad. The Times has a serious problem on its hands.

I wonder if the New York Times will ever reveal the name of this bogus advertiser?