Web-Based Threats: First Half 2019
Summary: Unit 42's ELINK data showed total malicious URLs fell 61% from Q4 2018 to Q1 2019, then returned to roughly Q4 levels in Q2 as Fallout exploit kit activity declined and Kaixin activity rose. China overtook the United States in Q2 2019 as the top host of malicious domains, while the US continued to host over 40% of phishing domains, and ELINK detected around 430,000 credential harvesting phishing URLs since phishing detection began in late Q3 2018.
Why it matters: The researchers note that 10-year-old vulnerabilities are still being exploited in the wild, and that credential harvesting via phishing may be more effective for an adversary than a browser or system exploit - meaning patch status alone does not close the door.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Malware
- Mentions
- CVE-2008-4844CVE-2014-6332CVE-2018-8174
- Related
- Web-based Threats-2018 Q2: U.S. Remains #1 in Malicious Web Addresses, China Falls from #2 to #7 Cyber Risks ·CVE-2014-6332: Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability Known Exploited Vulnerabilities · Mar 25, 2022CVE-2018-8174: Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability Known Exploited Vulnerabilities · Feb 15, 2022