the Malware in action CryptoWall 2.0 ransomware impacted the visitors running a vulnerable/ unpatched version of Adobe Flash player.
Using Adobe Flash, the malvertisements silently pull in malicious exploits from the FlashPack Exploit Kit.
The exploits attack a vulnerability in the end-users web app and install CryptoWall 2.0 on end-users computers.
List of domains which were affected along with their global Alexa rankings as given on proofpoint blog.
These dynamic ads in turn were serving the CryptoWall to the the victims.
source: www.techworm.net