Exploit kits: spring 2019 review

🗓️ 14 May 2019 15:57:05Reported by Jérôme SeguraType

malwarebytes🔗 blog.malwarebytes.com👁 623 Views

Exploit kits targeting routers identified in spring 2019, affecting countries like US, Spain, and South Korea. New Spelevo EK avoids virtual machines and delivers PsiX Bot, IcedID as payloads. Fallout EK loads IE exploit via GitHub and self-hosting, delivers GandCrab, Raccoon Stealer, Baldr. Magnitude EK targets Asia Pacific with Magniber ransomware. RIG EK employs Flash's CVE-2018-4878, distributes AZORult, Pitou, ElectrumDoSMiner. Underminer EK features overkill obfuscation and uses Hidden Bee for delivery. Common vulnerabilities include Internet Explorer's CVE-2018-8174 and Flash Player's CVE-2018-15982

Reporter	Title	Published	Views	Family All 290
GithubExploit	Exploit for Use After Free in Adobe Flash_Player	4 Apr 201804:33	–	githubexploit
GithubExploit	Exploit for Out-of-bounds Write in Microsoft	23 May 201910:28	–	githubexploit
GithubExploit	Exploit for Out-of-bounds Write in Microsoft	1 Jun 201822:12	–	githubexploit
GithubExploit	Exploit for Use After Free in Adobe Flash_Player	11 Dec 201816:31	–	githubexploit
GithubExploit	Exploit for Out-of-bounds Write in Microsoft	30 May 201803:12	–	githubexploit
GithubExploit	Exploit for Out-of-bounds Write in Microsoft	22 May 201821:50	–	githubexploit
GithubExploit	Exploit for Use After Free in Adobe Flash_Player	10 Feb 201809:30	–	githubexploit
GithubExploit	Exploit for Out-of-bounds Write in Microsoft	10 Jul 201819:31	–	githubexploit
GithubExploit	Exploit for Use After Free in Adobe Flash_Player	12 Dec 201804:07	–	githubexploit
GithubExploit	Exploit for Use After Free in Adobe Flash_Player	6 Dec 201809:24	–	githubexploit

14 May 2019 15:57Current

9.3High risk

Vulners AI Score9.3

EPSS0.89618