AftonBladet (http://www.aftonbladet.se) was compromised and serving visitors a fake antivirus or rogueware. Only Javascript was injected into the site, and the malware is a common social engineering attack. No exploit was used, nor Java/Adobe, nor browser- or browser- tools were used in the attack. Malware is the Tritax family, which has been going around for quite some time and has lots and lots of different names.”]
Source: https://bartblaze.blogspot.com/2014/02/swedish-newssite-compromised.html