"Common Techniques Attackers Use to Distribute Malware across Web, by Stealing domain account credentials via phishing to create multiple subdomains that direct traffic to landing pages hosting an exploit kit"

Malvertising

Compromised Legitimate Websites

Domain Shadowing

Spear Phishing Sites