Ransomware is being distributed to visitors of various,AOL sites, via advertisements served over the AOL advertising network, according to researchers with Cyphort Labs.

The advertisement redirected visitors to a landing page serving up either the Neutrino Exploit Kit or the Sweet Orange Exploit Kit, Bilogorskiy said. The exploit kit served a Flash exploit and a VB script, and then downloaded the Kovter trojan, which is ransomware that locks the infected machine’s screen from access by the user.

Popular AOL sites include:

Huffington Post, Movie Fine, Cambio and Daily Finance.

If you frequent any AOL properties we recommend you have your system scanned for Malware.