Palo Alto Networks

Neutrino EK

Afraidgate: Major Exploit Kit Campaign Switches from CryptXXX Ransomware Back to Locky

By mid-July 2016, the Afraidgate campaign stopped distributing CryptXXX ransomware. It is now distributing the ".zepto" variant of Locky. Afraidgate has been using Neutrino exploit kit (EK) to distribute malware after Angler EK disappeared in early June 2016. As we previously reported, this campaign continues to utilize gate domains using name servers from afraid.org. (more…)

By mid-July 2016, the Afraidgate campaign stopped distributing CryptXXX ransomware. It is now distri...

Malware

Threat Prevention

Unit 42

Jul 29, 2016

By Brad Duncan

Palo Alto Networks

Products and Services

Partners

Malware, Threat Prevention, Unit 42

Afraidgate: Major Exploit Kit Campaign Swaps Locky Ransomware for CryptXXX

In mid-April 2016, a campaign using Nuclear Exploit Kit (EK) to distribute Locky ransomware switched to using the Angler EK to install CryptXXX ransom...

Apr 28, 2016

By Brad Duncan