Large malvertising campaign targeting the Netherlands

**Executive summary:** Fox-IT observed an active malvertising campaign (June 2015) that used advertisements on major publishers to redirect Dutch visitors through otsmarketing.com (107.181.187.81) to the Angler Exploit Kit, which commonly installs the Bedep Trojan; the report provides IOCs and recommends blocking the host while coordinating with ad networks to remove the malicious ad.