Exploit kits: summer 2018 review

Threat analysis | Exploits

‘Hidden Bee’ miner delivered via improved drive-by download toolkit

July 26, 2018 - Threat actors switch to the Hidden Bee miner as a payload for this unusual and complex drive-by download campaign.

Threat analysis | Exploits

Magniber ransomware improves, expands within Asia

July 16, 2018 - After a controlled delivery focused on South Korea, an upgraded Magniber ransomware is now affecting other Asian countries.

Threat analysis | Exploits

Adobe Reader zero-day discovered alongside Windows vulnerability

May 15, 2018 - A new Adobe Reader zero-day exploit has been discovered, including a full sandbox escape.

Threat analysis | Exploits

Internet Explorer zero-day: browser is once again under attack

May 10, 2018 - Internet Explorer is yet again leveraged for a zero-day exploit delivered via Office document—the first zero-day observed for IE in over two years.

Threat analysis | Exploits

Magnitude exploit kit switches to GandCrab ransomware

April 17, 2018 - After being faithful to its own Magniber ransomware for several months, Magnitude EK joins others to adopt GandCrab.

Threat analysis | Exploits

Exploit kits: Winter 2018 review

March 29, 2018 - In this Winter 2018 review, we check the pulse of exploit kits and their latest developments.

Threat analysis | Exploits

Hermes ransomware distributed to South Koreans via recent Flash zero-day

March 14, 2018 - An uncommon exploit kit adds a fresh Flash Player exploit to distribute the Hermes ransomware in South Korea.

Threat analysis | Exploits

RIG malvertising campaign uses cryptocurrency theme as decoy

February 28, 2018 - This malvertising campaign uses a popular cryptocurrency theme to redirect users to the RIG exploit kit.

Threat analysis | Exploits

GandCrab ransomware distributed by RIG and GrandSoft exploit kits (updated)

January 30, 2018 - Ransomware may have slowed its growth but is still a go-to payload for threat actors looking to monetize drive-by download attacks. The latest attempt: GandCrab ransomware.

Threat analysis | Exploits

Seamless campaign serves RIG EK via Punycode (updated)

December 4, 2017 - The most prolific gate to the RIG exploit kit is coming in a different flavor. The Seamless campaign is now using a domain name with foreign characters translated by Punycode.