We're continuing to see malware injection attacks against ColdFusion sites. The latest attack used the public upload in the popular Galleon software. Read the details here:

How Galleon Was Hacked

It appears to be the same user(s) as the ones that have attacked CFWebstore and FCKEditor installations, so they clearly are continuing to shift tactics in order to infect ColdFusion sites in new ways, and also change the file names they use to upload to sites, so be sure to check for *any* sites that have upload features that the hackers could make use of.