The guys over at Hispasec have just published a very nice analysis of the ANI loader vulnerability. It's also very interesting to see the stats of unique samples received at VirusTotal that exploit the ANI vulnerability.