When a small advertisement becomes a big risk: follow our Incident Responders deep investigating a rare malware infection via hot advertisement. During the speech you will be guided to the entire process, from Early Warning to Remediation, including HR approach to the user. We will cover new aspects about Malvertising as Social Profiling capabilities used to targeting the attack and how attackers mask their identity behind the advertisement network. At the end of the presentation, a section about preventive measures implemented will be explained as result of "Lesson Learned Phase".