Exploit Kits Exposed: Automated Attacks at Scale
Summary: Exploit kits let an attacker silently exploit a vulnerability in a browser-based application, deliver a malware payload, and run the attack through rental-based infrastructure. The first documented case appeared in 2006, and the model took off in 2010 with the Blackhole EK and its software-as-a-service business model, which let actors outsource nearly the entire attack flow; Blackhole disappeared after its author's arrest, but another kit took over.
What you should know: Unit 42 research cited here puts exploit kits at about twice their price of two years ago, a signal that demand for outsourced, automated attacks keeps rising even as individual kits get taken down.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026