Website of security certification provider spreading ransomware

Fox-IT observed a malicious redirect on the EC-Council iClass site that, under specific conditions (Internet Explorer user-agent, search-engine referrer, non-blocked geolocation), redirected visitors to the Angler exploit kit which delivered a Bedep loader and ultimately TeslaCrypt ransomware; the post includes payload details and multiple C2 IOCs.