Sunbelt Software reports that the Bank of India's Web site was hacked on 29th August and used to distribute an enormous amount of malware, including rootkits and trojans, to the visitors.

Researchers at Sunbelt Software first posted details of the hack after finding rogue code embedded in the site's HTML. That code, actually an IFRAME exploit, silently redirected users to a hacker server, which pushed 22 different pieces of malware onto vulnerable PCs. By Sunbelt's tally, the malware included one worm, three rootkits, five Trojan downloaders, and several password stealers.

“It’s a huge payload of malicious code which Sunbelt is still analysing,” said Alex Eckelberry, Sunbelt's CEO.

The payload from the Bank of India site is said to be attempting a number of Internet Explorer exploits to break into computers that may not be fully patched. Other types of software-application exploits may also be involved, which Sunbelt is still analysing.

The bank's site has been scoured of all malware and is up and working.