Forest Global Training Partners

Cyber Risks · Krebs on Security

Revisiting the Eleonore Exploit Kit

Summary: A live Eleonore exploit kit panel showed the kit carrying at least six browser exploits - three for Internet Explorer, two for Java, and one for Adobe PDF Reader - and infecting roughly one in ten visitors to the poisoned adult sites it was stitched into. In this installation, four out of every ten hacked victims were compromised through an outdated version of Java, nearly one-third through older Adobe PDF Reader flaws, and more than one-third of visitors on IE6 were infected, while Zscaler reported about 5 percent of first-quarter browser exploits it identified were tied to hacked or malicious sites outfitted with some version of Eleonore.

What you should know: Of 1,363 successful loads cited in the discussion, 1,289 - 94.6 percent - exploited some version of Internet Explorer, and Java had moved from second most reliable exploit to the biggest source of infections, which puts the exposure on the third-party plugins and browsers sitting on your endpoints rather than on the sites your users visit.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related