Over the weekend and into today, four different malvertising campaigns have been redirecting users to exploit kits that install password stealing Trojans, ransomware, and clipboard hijackers. All four of these campaigns were discovered by exploit kit expert nao_sec and are being distributed through malvertising that redirect visitors to the exploit kits landing pages. These landing pages are typically hosted on hacked sites. Once a user visits the site, the kit’s scripts will attempt to exploit vulnerabilities in the visitor’s browser to automatically download and install malware without the user’s knowledge.
Source: BleepingComputer
