Analyzing a new exploit pack: Difference between revisions
Appearance
m 1 revision imported |
No edit summary |
||
| Line 1: | Line 1: | ||
{{Publication | {{Publication | ||
| | |Botnet=, | ||
| | |Malware=, | ||
|ExploitKit=Kein, | |||
|CCProtocol=, | |||
|Year=2012 | |||
|Date=2012-08-15 | |||
|Editor=Kahu Security | |||
|Link=http://www.kahusecurity.com/2012/analyzing-a-new-exploit-pack/ | |||
|Author=Darryl, | |||
|Type=Blogpost | |||
|Abstract=A new exploit pack has recently appeared and is getting a decent amount of drive-by traffic. This pack employs several exploits and includes two different social engineering ploys so there’s something for everyone. | |||
This pack can be primarily found on the kein.hk domain so let’s call this the “Kein Exploit Pack”. Here are the parts of this pack that we’ll be analyzing. As you can see, the majority of the exploits used in this pack is outdated but they have little AV coverage. | |||
|Document= | |Document= | ||
|Licence= | |Licence= | ||
|Video= | |Video= | ||
|NomRevue=Kahu Security blog | |NomRevue=Kahu Security blog | ||
|ISBN= | |ISBN= | ||
|Page= | |Page= | ||
|Operation=, | |||
|Keyword=, | |||
|Operation=, | |||
|Keyword=, | |||
}} | }} | ||
Latest revision as of 22:52, 18 July 2015
(Publication) Google search: [1]
| Analyzing a new exploit pack | |
|---|---|
| Botnet | |
| Malware | |
| Botnet/malware group | |
| Exploit kits | Kein |
| Services | |
| Feature | |
| Distribution vector | |
| Target | |
| Origin | |
| Campaign | |
| Operation/Working group | |
| Vulnerability | |
| CCProtocol | |
| Date | 2012 / 2012-08-15 |
| Editor/Conference | Kahu Security |
| Link | http://www.kahusecurity.com/2012/analyzing-a-new-exploit-pack/ (Archive copy) |
| Author | Darryl |
| Type | Blogpost |
Abstract
“ A new exploit pack has recently appeared and is getting a decent amount of drive-by traffic. This pack employs several exploits and includes two different social engineering ploys so there’s something for everyone.
This pack can be primarily found on the kein.hk domain so let’s call this the “Kein Exploit Pack”. Here are the parts of this pack that we’ll be analyzing. As you can see, the majority of the exploits used in this pack is outdated but they have little AV coverage.
Bibtex
@misc{Darryl2012BFR1096,
editor = {Kahu Security},
author = {Darryl},
title = {Analyzing a new exploit pack},
date = {15},
month = Aug,
year = {2012},
howpublished = {\url{http://www.kahusecurity.com/2012/analyzing-a-new-exploit-pack/}},
}