AJAX Exploit Kit - Now At Scale | Fortinet Blog

At around 5AM PST today, our automatic website scanning system began to detect malicious contents being served from a top 10 global website. This lasted to around 8:30AM PST when, presumably, the website's operators disabled the malicious content.

Upon analysis, it appears that a malware is being served through the website's advertisement network. What's technically interesting about this case is that the malware (an 'exploit kit') is being pushed though AJAX. This is something that was previously done only in small scale exploit kit campaigns.

AJAX Exploit Kit - Now At Scale | Fortinet Blog