New Exploit Kit Spelevo Carries Bag of Old Tricks

guest · Jun 27, 2019

New Exploit Kit Spelevo Carries Bag of Old Tricks
June 27, 2019
https://www.bleepingcomputer.com/news/security/new-exploit-kit-spelevo-carries-bag-of-old-tricks/

A new exploit kit that researchers named Spelevo has emerged recently targeting a certain category of victims and infect their computer systems with two banking trojans.

To achieve their goal, exploit kits (EKs) use a traffic direct system (TDS) or gate that points the connection to a landing page where the potential victim device is analyzed for vulnerable applications. Candidates are then directed to the adequate exploit.
Spelevo exploits patched bugs in IE and Adobe Flash
Discovered by security researcher Kafeine back in early March, Spelevo uses a business-to-business (B2B) website to drop infamous banking trojans IceD and Dridex, according to an analysis from Cisco Talos today.

If a vulnerable version of Adobe Flash plugin is available, Spelevo leverages the first bug (CVE-2018-15982) Malwarebytes mentioned for the component; otherwise, the IE flaw (CVE-2018-8174) is exploited, which is a use-after-free in the VBScript engine of the browser.
Click to expand...

Cisco Talos: Welcome Spelevo: New exploit kit full of old tricks

Log in or Sign up

New Exploit Kit Spelevo Carries Bag of Old Tricks

guest Guest

Log in or Sign up

New Exploit Kit Spelevo Carries Bag of Old Tricks

guest Guest

Useful Searches