The Old and New: Current Trends in Web-based Threats
Summary: Unit 42's Email Link Analysis for the first quarter of 2018 found 1,583 malicious URLs across 496 domains hosted in 27 countries and regions, with attackers using at least 8 old, publicly available vulnerabilities including Internet Explorer VBScript flaws and an Adobe Flash Player bug from the 2015 Hacking Team leak. Of those URLs, 1,284 were exploit-kit related, with KaiXin EK still evolving through added obfuscation layers and a cryptocurrency miner while Sundown and Rig slowed down, and by April 11, 2018 only 375 URLs and 145 domains were still alive.
What's compelling: Attackers were still exploiting CVE-2008-4844 and CVE-2009-0075 while 6.55% of users remained on Windows XP and 3.17% on IE6 through IE10, so the oldest unpatched endpoints in an estate remain the cheapest way in.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2008-4844CVE-2009-0075CVE-2014-6322CVE-2016-0189
- Related
- Web-based Threats-2018 Q2: U.S. Remains #1 in Malicious Web Addresses, China Falls from #2 to #7 Cyber Risks ·CVE-2016-0189: Microsoft Internet Explorer Memory Corruption Vulnerability Known Exploited Vulnerabilities · Mar 28, 2022