China has a new system for injecting malicious Javascript into users' machines to make them attack any chosen target site.

A more technical analysis of how it works.