Malicious trading website drops malware that hands your browser to attackers