Exploiting the Exploiters
Summary: At the Syscan security conference in Singapore, Laurent Oudot of Paris-based TEHTRI Security released advisories outlining more than a dozen remotely exploitable flaws in exploit packs such as Eleonore, Crimepack and iPack, which sell underground for hundreds of dollars and probe visitors' browsers to install malware. Some flaws would let an attacker view internal data stored by the kits, and others could let an attacker seize control of sites retrofitted with one of the packs.
Why it matters: Oudot's own disclosure drew pushback from security community members who argued that publishing the flaws would simply prompt the kit makers to ship patches - Eleonore had already shipped several updates in the past year, including version 1.4.1 - while the same information could be picked up by novice hackers with less noble intentions.
Read the original at Krebs on Security ↗
- Topics
- Cybercrime & Law Enforcement
- Related
- Gootloader Malware Disrupted After Infecting 25,000 Computers Cyber Risks · Nov 13, 2026354 dark web vendors and buyers arrested in Operation Tor Nado Cyber Risks · Nov 13, 2026Law Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure Cyber Risks · Nov 13, 2026