Exploit Kit Starts Pushing Malware Via Fake Adult Sites

guest · Dec 19, 2019

Exploit Kit Starts Pushing Malware Via Fake Adult Sites
December 19, 2019
https://www.bleepingcomputer.com/ne...-starts-pushing-malware-via-fake-adult-sites/

Spelevo exploit kit's operators have recently added a new infection vector as part of their attacks, attempting to social engineer potential targets into downloading and executing addition malware payloads from decoy adult sites.

This exploit kit was initially spotted by security researcher Kafeine back in early March 2019 and it has been used as a delivery platform for the infamous IceD and Dridex banking trojans as Cisco Talos found in June, and to drop Maze Ransomware payloads as researcher nao_sec discovered.

"Recently, we captured an unusual change with the Spelevo exploit kit where, after an attempt to trigger vulnerabilities in Internet Explorer and Flash Player, users were immediately redirected to a decoy adult site," Malwarebytes security researcher Jérôme Segura said.
[...] Spelevo EK will automatically redirect the targets to a decoy adult site where they will be asked to download and install a video code to play the videos.
Click to expand...

By adopting this new social engineering tactic, the attackers will still have a chance to drop additional malware payloads, Qbot banking Trojans in this case, even when the exploit kit fails to lead to successful infection.
This new tactic adopted by Spelevo EK's operators increases the number of infection vectors used in their campaigns hence making them more effective in the long run.
Click to expand...

Malwarebytes: Spelevo exploit kit debuts new social engineering trick

Rasheed187 · Dec 21, 2019

Seriously, who cares. As you can see, once again it's good old IE that's being attacked. I would like to read about exploit-kits that are targeting Chrome, Firefox and Edge. But it seems like they don't exist at the moment.

wat0114 · Dec 21, 2019

It looks more like a social engineering tactic to trick users into downloading and installing a fake video codec.

Log in or Sign up

Exploit Kit Starts Pushing Malware Via Fake Adult Sites

guest Guest

Rasheed187 Registered Member

wat0114 Registered Member

Log in or Sign up

Exploit Kit Starts Pushing Malware Via Fake Adult Sites

guest Guest

Rasheed187 Registered Member

wat0114 Registered Member

Useful Searches