View source for Cool Exploit Kit - A new Browser Exploit Pack on the Battlefield with a "Duqu" like font drop

{{Publication
|Image=CoolEK1.png
|Legend=
|Document=
|Licence=
|Video=
|Link=http://malware.dontneedcoffee.com/2012/10/newcoolek.html
|Author=Kafeine, 
|NomRevue=Malware.dontneedcoffee.com
|Date=2012-10-09
|Editor=
|Year=2012
|ISBN=
|Page=
|Abstract=Few days ago i discovered that a bunch of reverse proxies that I was linking to same Blackhole Exploit Kit were in fact linked to 2 different Blackhole (quite surely operated by same team - I saw reverse proxies being redirected from one server to another one)

Trying to build a signature to know which server was behind a specific reverse, I found a new exploit kit.
|Botnet=, 
|Malware=, 
|ExploitKit=Cool Exploit Kit, 
|CCProtocol=, 
|Operation=, 
|Keyword=, 
}}