Web-based malware determines your OS, then strikes