And here is the metasploit code:
<a href="http://www.metasploit.com/redmine/projects/framework/repository/revisions/8136/entry/modules/exploits/windows/browser/ie_aurora.rb" rel="nofollow">http://www.metasploit.com/redmine/projects/framework/reposit...</a><p>I guess "sophisticated attack" is really a relative term. Possibly Google and Co could not really tell the press "we have been hacked through an IE bug, kinda of the same way any other guy and their mums are every day".