RIG EK was leveraged in a high profile malvertising attack on popular website answers.com. The same domain shadowing campaigns that were popular in the Angler era are continuing with RIG now. Some visitors that browsed the knowledge-based website were exposed to the fraudulent and malicious advert and could have been infected without even having to click on it. RIG has been observed dropping the CrypMIC ransomware, a payload that Neutrino first served back in July.”]