Continued analysis of the Lights Out Exploit Kit
Summary: Cisco Talos published a follow-up analysis of the LightsOut exploit kit, which it first disclosed at the end of March as "Hello" and which uses multiple Java vulnerabilities to target Chrome and Internet Explorer. The kit's primary goal is to drop and execute a downloader that pulls further malware samples, run in sequence, to harvest information and potentially exfiltrate it.
What you should know: The kit chains Java flaws including CVE-2013-2465, CVE-2012-1723 and CVE-2013-2423 plus an Internet Explorer use-after-free, so any host still carrying an outdated Java install is exposed to a sequence of malware that ends in data exfiltration.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2012-1723CVE-2013-1347CVE-2013-2423CVE-2013-2465
- Related
- The never ending Exploit Kit shift - Bleeding Life Cyber Risks ·CVE-2013-2423: Oracle JRE Unspecified Vulnerability Known Exploited Vulnerabilities · May 25, 2022CVE-2013-2465: Oracle Java SE Unspecified Vulnerability Known Exploited Vulnerabilities · Mar 28, 2022