Terror Exploit Kit Evolves Into Larger Threat

The Terror exploit kit has matured into a greater threat and carefully crafts attacks based on a user’s browser environment. Continue reading Terror Exploit Kit Evolves Into Larger Threat

Where Have All The Exploit Kits Gone?

For a long time, exploit kits were the most prolific malware distribution vehicle available to attackers. Where did they go and what’s replaced them? Continue reading Where Have All The Exploit Kits Gone?

Inside the RIG Exploit Kit

In a deep analysis of RIG, Cisco Talos team outlined the way the exploit kit combines different web technologies such as DoSWF, JavaScript, Flash and VBscript to obfuscate attacks. Continue reading Inside the RIG Exploit Kit

Threatpost News Wrap, September 2, 2016

Mike Mimoso, Tom Spring, and Chris Brook discuss the news of the week, including the MedSec/Muddy Waters story, how the Angler EK was traced back to the Lurk Gang, Fairware hitting Linux servers, and the Bashlite IoT malware. Continue reading Threatpost News Wrap, September 2, 2016

Neutrino EK picks up momentum in recent attacks

The Neutrino developers have made some changes to the landing page source code as well as integrated a new exploit. The malware campaigns that once were Angler’s continue to point to Neutrino including a large malvertising attack on top adult sites we … Continue reading Neutrino EK picks up momentum in recent attacks

Threatpost News Wrap, June 24, 2016

Mike Mimoso and Chris Brook recap the news of the week, including a Bitcoin phishing campaign, the Kaspersky Lab ransomware report, misconfigured email servers, and a decline in Angler exploit kit traffic. Continue reading Threatpost News Wrap, June 24, 2016

Popular Anime Site Infected, Redirecting to Exploit Kit, Ransomware

Jkanime, a popular site that streams anime videos, has been infected with malware that redirects to the Neutrino Exploit Kit and CryptXXX ransomware infections. Continue reading Popular Anime Site Infected, Redirecting to Exploit Kit, Ransomware

News Flash: the “Ohdear­notagain” vulnerability [Chet Chat Podcast 242]

Enjoy our latest podcast with Sophos experts John Shier and Paul Ducklin as they take wittily serious aim at the latest security news. Continue reading News Flash: the “Ohdear­notagain” vulnerability [Chet Chat Podcast 242]