APT17 has compromised a popular website frequented by employees of the targeted Japanese organizations. They are using it to deliver malicious payloads exploiting the Internet Explorer zero-day vulnerability (CVE-2013-3893). Initial access attempt detected via suspicious web traffic from a known malicious IP.