Palo Alto Networks

Angler Exploit Kit

Campaign Evolution: pseudo-Darkleech in 2016

Darkleech is long-running campaign that uses exploit kits (EKs) to deliver malware. First identified in 2012, this campaign has used different EKs to distribute various types of malware during the past few years. We reviewed the most recent iteration of this campaign in March 2016 after it had settled into a pattern of distribut...

Unit 42

Dec 30, 2016

By Brad Duncan

Palo Alto Networks

Products and Services

Partners

Unit 42

EITest Campaign Evolution: From Angler EK to Neutrino and Rig

EITest is a long-running campaign that uses exploit kits (EKs) to distribute a variety of malware. This campaign was first identified in October 2014, and we reviewed how the EITes...

Oct 03, 2016

By Brad Duncan

Events, News of the Week

Palo Alto Networks News of the Week – June 11

In part six of this series, Unit 42’s Josh Grunzweig looks at the power of IDAPython and command-line switches to save time and make your life as a researcher easier. (Check out part 1, part 2, part 3, part 4,...

Jun 11, 2016

By Anna Lough

Malware, Threat Prevention, Unit 42

Understanding Angler Exploit Kit - Part 2: Examining Angler EK

This is the second part of a two-part blog post for understanding Angler exploit kit (EK). The first part covered EKs in general. This blog focuses on...

Jun 07, 2016

By Brad Duncan

Malware, Threat Prevention, Unit 42

Understanding Angler Exploit Kit - Part 1: Exploit Kit Fundamentals

Generally speaking, criminal groups use two methods for widespread distribution of malware. The most common method is malicious spam (malspam). This i...

Jun 03, 2016

By Brad Duncan

Unit 42

How the EITest Campaign's Path to Angler EK Evolved Over Time

In October 2014, Malwarebytes identified a campaign based on thousands of compromised websites that kicked off an infection chain to Angler exploit kit (EK). It was named "EITest"...

Mar 31, 2016

By Brad Duncan

Malware, Threat Prevention, Unit 42

Angler Exploit Kit Continues to Evade Detection: Over 90,000 Websites Compr...

Exploit Kits (EK), arguably the most impactful malicious infrastructure on the Internet, constantly evolve to evade detection by security technology....

Jan 11, 2016

By Yuchen Zhou and Wei Xu

Malware, Threat Prevention, Unit 42

Dormant Malicious Code Discovered on Thousands of Websites

Note: This post was updated on November 18, 2015 to reflect new information about the initial discovery of the injected code.

Nov 14, 2015

By Yuchen Zhou and Wei Xu

Load more blogs