Capesand EK attacking IE, Flash vulnerabilities

guest · Nov 5, 2019

Capesand EK attacking IE, Flash vulnerabilities
November 5, 2019
https://www.scmagazine.com/home/sec...pesand-ek-attacking-ie-flash-vulnerabilities/

The new Capesand exploit kit, possibly derived from an older EK, has been found being used to take advantage of Internet Explorer and Adobe Flash vulnerabilities.

Trend Micro’s Elliot Cao, Joseph C. Chen and William Gamazo Sanchez came across Capesand while tracking a campaign that was using the Rig EK to DarkRAT and njRAT malware. During this process the trio saw the malicious actors had switched from Rig to a new and unfamiliar type. Further digging found the EK’s control panel, one with the name Capesand and they realized it was directly providing the source code for the EK.

“The Capesand exploit kit’s code is quite simple compared with other kits. Almost all of Capesand‘s functions reuse open-source code, including the exploits, obfuscation, and packing techniques. Further monitoring revealed that its users are actively using it despite its seemingly unfinished state, the researchers wrote.
The researchers believe Capesand is still being developed and is evolving in a direction that may allow it to distribute malicious landing pages through mirrored versions of the legitimate site by using typosquatting.
Click to expand...

Trend Micro: New Exploit Kit Capesand Reuses Old and New Public Exploits and Tools, Blockchain Ruse

Log in or Sign up

Capesand EK attacking IE, Flash vulnerabilities

guest Guest

Log in or Sign up

Capesand EK attacking IE, Flash vulnerabilities

guest Guest

Useful Searches