Noah: I never said Google Analytics was malware, though I was perhaps not clear enough on that point. According to the Zero Day article, the attackers are using a domain name very similar to that of Google Analytics to try to make their exploit site seem legitimate.
The *only* domain name mentioned in the article was the one with the hyphen. When I visited my own Google Analytics account, it was served by a site at the standard Google domain, not
I will do some more research and issue a correction/clarification in my next episode. The issue definitely is not whether or not Google Analytics is malware, or more properly an exploit site, but rather what similar seeming domain name these attackers have set up their exploit site as and make sure that the subtly incorrect domain name is the one you block to prevent yourself from being harmed.