This malvertising campaign uses a popular cryptocurrency theme to redirect users to the RIG exploit kit.
The most prolific gate to the RIG exploit kit is coming in a different flavor. The Seamless campaign is now using a domain name with foreign characters translated by Punycode.
This new malvertising campaign on adult websites was pushing the Ramnit information stealer.
In the battle of exploit kits, RIG EK has earned some extra mileage by being leveraged in a high profile malvertising attack on popular website answers.com. The same domain shadowing campaigns that were popular in the Angler era are continuing with RIG now.