The attackers have injected “malicious JavaScript” into legitimate websites that will warn users they have an outdated ...