Trusted Design

RIG Exploit Kit Infection Cycle Analysis

概要

Happy belated birthday to RIG exploit kit! First seen around April 2014, RIG has been in the news several times over the past year. In February, the source code was reportedly leaked online, which likely spurred some of the recent changes we've observed in the kit. ThreatLabZ has been keeping an eye on RIG and in this post we'll cover an example of a full RIG infection cycle.

Created: 2026-02-23

Indicators

• CVE - CVE-2015-0313 -
• URL - http://trip.slotsbid.com/?xniKfredKx_HCYY=l3SKfPrfJxzFGMSUb-nJDa9GPkXCRQLPh4SGhKrXCJ-ofSih17OIFxzsmTu2KV_OpqxveN0SZFT_zR3AaQ4ilotXQB5MrPzwnEqWwxWeioWAqBHbYw1MrcOTEOcz0Aj2yeVBd892zxWA4GMBmL5MVUgbrA -
• hostname - four.pavementexpress.org -
• URL - http://four.pavementexpress.org/?xH6Af7ieJRvHDIs=l3SKfPrfJxzFGMSUb-nJDa9GPkXCRQLPh4SGhKrXCJ-ofSih17OIFxzsmTu2KV_OpqxveN0SZFT_zR3AaQ4ilotXQB5MrPzwnEqWwxWeioWBrxaIYwMU95LEQOdviwijm7VFJMonk0DRvWcDnrtMU0gbrA -
• domain - starpowerss.com -
• CVE - CVE-2014-6332 -
• hostname - trip.slotsbid.com -

類似Pulses

• RIG Exploit Kit - May 2015 (score: 0.80)
• RIG Exploit Kit Analysis by Malware Traffic Analysis (score: 0.66)
• MTA 2016-01-18: TWO INFECTIONS (RIG AND ANGLER EK) (score: 0.66)
• Observed Rig EK exploitation attempt - 2016/08/30 (score: 0.63)
• MTA 2016-02-07: RIG EK FROM 188.227.16.59 (score: 0.61)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る