Major security certification group ignored private warnings for more than 3 days.
Category: drive-by attack
Infected sites load attack code into webpages viewed by visitors.
Pop-up window automatically activated when suspicious activity is detected.