Magnitude Exploit Kit Leading To Ransomware Via Malvertising

This report details an active campaign using the Magnitude Exploit Kit distributed via malvertising and compromised/fake search pages to exploit browser/plugin vulnerabilities (MS13-009), deliver shellcode that fetches payload URLs, and install CryptoWall 3.0 ransomware; it includes numerous redirector and landing domains, example ad-network redirect URLs (click2.systemaffiliate.com / Sunlight Media), and hosting/traffic observations (notably German hosts).