Collaborate Disseminate
Keeping up with twists and turns on the exploit kit scene, we examine a new redirection mechanism to Neutrino EK which adds fingerprinting way up the infection chain by crafting a special Flash file and uploading it on compromised hosts. This ensures p… Continue reading Neutrino EK: more Flash trickery
In the cybercrime landscape, Exploit Kits (EKs) are the tool of choice to infect endpoints by exploiting software vulnerabilities. However, a critical component EKs rely on is web traffic, which must be directed towards them.
In this post, we take a lo… Continue reading A look into Neutrino EK’s jQueryGate
The AdGholas malvertising network planted malicious ads on popular sites including The New York Times and The Verge.
David Bisson reports.
Continue reading The AdGholas malvertising network was using steganography, researchers reveal
Attackers behind the Neutrino Exploit Kit didn’t take long to co-op a recently patched Internet Explorer zero-day into its arsenal. Continue reading Patched IE Zero Day Incorporated into Neutrino EK
The Neutrino developers have made some changes to the landing page source code as well as integrated a new exploit. The malware campaigns that once were Angler’s continue to point to Neutrino including a large malvertising attack on top adult sites we … Continue reading Neutrino EK picks up momentum in recent attacks
The last high profile malvertising activity we had seen was on June 7th with a drive-by download incident on Yahoo that used Neutrino EK instead of Angler EK. This was rather unusual and was later confirmed as not just an anomaly, by the switch of expl… Continue reading Malvertising slowing down, but not out
Since the disappearance of Angler EK, exploit kit activity is at one of its lowest it has been in a long time. The focus is therefore on Neutrino EK, which has somewhat picked up the pieces, although at a much lower rate. In this post we look at a chan… Continue reading Neutrino EK: fingerprinting in a Flash
Jkanime, an anime streaming site that typically receives 33 million visitors a month, has been found spreading malicious code onto visiting users’ computers.
David Bisson reports.
Continue reading Anime site redirects to Neutrino exploit kit, CryptXXX ransomware
Jkanime, a popular site that streams anime videos, has been infected with malware that redirects to the Neutrino Exploit Kit and CryptXXX ransomware infections. Continue reading Popular Anime Site Infected, Redirecting to Exploit Kit, Ransomware
For those tracking exploit kits, the disappearance of the Angler exploit kit last week was a major event. While a lot of questions remain, several clues pointed out that this was no ordinary break, and that something deeper was likely going on. After a… Continue reading A look at the Angler-less exploit kit scene