Trusted Design

EITest uses Adobe Flash to redirect to Angler exploit kit

概要

a shift in tactics by EITest, one of the main gates that drives traffic to the Angler exploit kit. Threat actors commonly use a gate, also known as a traffic detection system (TDS), to filter traffic based on a specific set of predefined criteria. Only the compromised systems that meet the criteria are redirected to the exploit kit. Until February 2016, obfuscated JavaScript injected by EITest on a compromised site contained a simple check to determine if the victim was using Internet Explorer. If so, the JavaScript redirected the browser to the Angler exploit kit's landing page

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• The Many Paths to Angler (score: 0.64)
• Large Malvertising Campaign Goes (Almost) Undetected (score: 0.64)
• Alienvault Labs: Malvertising leading to the Angler Exploit Kit (score: 0.62)
• Web Attack (score: 0.62)
• Large Malvertising Campaign Leads to Angler EK & Bunitu Malware (score: 0.62)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る