VirtualDonna

References:

3,000 High-Profile Japanese Sites Hit By Massive Malvertising Campaign - 2015-09-30 - Trend Micro - Joseph C. Chen VirtualDonna Angler

A DoubleClick https open redirect used in some malvertising chain - 2015-10-15 - MDNC - Kafeine VirtualDonna Angler

More Reading:

Large malvertising campaign targeting the Netherlands - 2015-06-15 - Fox-IT - Yonathan Klijnsma VirtualDonna Angler

Large Malvertising Campaign Goes (Almost) Undetected - 2015-09-14 - Malwarebytes - Jérôme Segura VirtualDonna Angler

Shifu <3 Great Britain - 2015-09-24 - MDNC - Kafeine Shifu VirtualDonna Angler

Inside Jahoo (Otlard.A ?) - A spam Botnet - 2015-11-28 - MDNC - Kafeine Otlard VirtualDonna Angler Nuclear ProxyBack Ramnit

Malvertising Hits DailyMotion, Serves Up Angler EK - 2015-12-07 - Malwarebytes - Jérôme Segura VirtualDonna Angler

Operation Fingerprint: A Look Into Several Angler Exploit Kit Malvertising Campaigns - 2016-03-01 - MalwarebytesGeoEdge - Eugene Aseev - Jérôme Segura VirtualDonna GooNky AdGholas Angler

Angler Takes Malvertising to New Heights - 2016-03-14 - SpiderLabs - Daniel Chechik - Simon Kenin - Rami Kogan VirtualDonna Angler

Wajam Browser Add-on Serves Malvertising - 2016-10-20 - Malwarebytes - Jérôme Segura VirtualDonna Angler