Malvertising attack on South African Mail & Guardian website serves Fake Antivirus

South African Mail & Guardian, a famous news portal in africa  is the latest victim of Malvertising attack. This is third Malvertising attack targeting top organizations in 2014. Few days ago Yahoo ads & Dailymotion also affected by the malvertising attack.

According to Blue Coat, a California based security firm A large number of visitors to the mg.co.za are being served a malicious ad that redirects to malicious page which is hosted in Server in Netherlands.

The redirected page shows a fake malware infection alert saying "Microsoft Antivirus has found critical process activity on Your pc. you need to clean your computer to prevent the system breakage".

Clicking the "OK" button downloads "setup.exe" file which is nothing other than Fake Antivirus