If the site has no exploits, how can it be called malicious ?

Surely this is libel.

Just because others break the law, doesn't mean we can ignore it.

And the title of the article is wrong in that respect also. Maybe it should read :

"New Years Eve greetings fail to disguise non-existent Storm Worm attacks", or

"New Years Eve greetings innocent".

Maybe F-Secure have another agenda (ya think ?).

Think terrorism.