These types of compromises associated with minor vulnerabilities and drive-by downloads are difficult to defend against in the absence of awareness training. Please take the time to educate your users on download best practices. We cannot continue to allow users to be desensitized to the error messages and warnings that come along with most browsers.
Take the time to properly configure certificates for local machines and properly manage user expectations when browsing.
Virtual Sweater Vest 