The scareware and rogue AV problem that initially appeared a few years ago and has since found its way onto thousands of legitimate Web sites, including The New York Times home page. Bojan Zdrnja of the SANS Internet Storm Center, has detailed exactly how one specific rogue AV attack works and exposed the methods that the attackers are using to gain victims and plant their malware on legitimate sites. The idea is to link all of their compromised sites together as a way to increase their rankings with Google, because that’s the key to the entire game.
Source: https://threatpost.com/scareware-black-hat-seo-and-you-062810/74151/