Trusted Design

GONGDA VS. KOREAN NEWS

概要

On Jan. 27, we observed visitors to a Korean news site being redirected to the GongDa Exploit Kit (EK), potentially exposing them to malware infection. We will be referring to this site as KNS. GongDa is an exploit kit that can compromise vulnerable endpoints by use of exploits, allowing harmful malware to be installed on the system. While GongDa is an older exploit kit that continues to use Java exploits, it has also been found delivering both Flash and VBScript exploits as well. Despite its shortcomings when compared to newer EK’s such as Angler or Neutrino, GongDa proves that old tricks (or vulnerabilities) can still work effectively.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• GongDa vs. Korean News (score: 0.97)
• KaiXin Exploit Kit (score: 0.65)
• Large Malvertising Campaign Leads to Angler EK & Bunitu Malware (score: 0.62)
• Unusual Exploit Kit Targets Chinese Users (score: 0.61)
• Korean Central News Agency serving malware (score: 0.61)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る