http://arstechnica.com/security/2012/12/apache-plugin-turns-legit-sites-into-bank-attack-platforms/
Annoyingly, the article doesn't say what plugin names to look for.
Anyone know if this is something we should be looking for? Any specific plugin names, etc.?