According to Paul Baccas, a senior threat researcher at Sophos, the link featured in an article about US investor Warren Buffet and took users to a fake banking site.
"It went to a third-party site, bankling.com, where users were redirected to a fake anti-virus page given a prompt saying their computer was infected and encouraging them to download a fix," he said.
In reality, the fix contained malware.
The exploit only affected users of Internet Explorer, including the most recent versions. Other browsers, including Firefox, were not affected.
