Compromised websites are being used to redirect to fake browser updates and deliver malware onto Mac users.