Palo Alto Networks

Exploit Kits

Pulling the Brake on the Magnitude EK Train

This blog goes into detail on recent work that Unit 42 has done to identify malicious sites associated with the Magnitude Exploit Kit (EK). It details the investigation process involved in identifying the algorithm used to generate domains used by the Magnitude EK. Defenders can use the provided data to identify possible domains that may be associated with the Magnitude EK before they're used and block them pre-emptively and so block Magnitude EK attacks before they happen....

Unit 42

Apr 13, 2017

By Jeff White

Palo Alto Networks

Products and Services

Partners

News of the Week

Palo Alto Networks News of the Week – February 4, 2017

Did you miss any of this week’s Palo Alto Networks action? Don’t worry, we’ve rounded up our top news right here:

Feb 04, 2017

By Justin Hall

Endpoint

Exploit Kits: Protect Yourself Before You Wreck Yourself

Exploit kits have become go-to tools for attackers to take control of victims’ machines or steal information. To protect yourself from this type of attack, it’s important to understand how exploit kits work, wh...

Feb 02, 2017

By Eila Shargh

News of the Week

Palo Alto Networks News of the Week – November 19, 2016

Did you miss any of this week’s Palo Alto Networks action? Don’t worry, we’ve rounded up the top news right here.

Nov 19, 2016

By Justin Hall

Unit 42

Exploit Kits Exposed: Automated Attacks at Scale

Put yourself in the shoes of an attacker: Your objective is to infiltrate an organization, deploy ransomware and get paid. It is your job to launch the most effective, lowest cost attack possible, which also de...

Nov 15, 2016

By Scott Simkin

Threat Prevention

Ransomware: Common Attack Methods

In order to better prevent ransomware, it is critical to understand the tactics attackers use to deliver this threat. This information will enable you to focus your security controls on the areas’ most likely to be leveraged, and reduce the risk of infection. There are...

Nov 10, 2016

By Eila Shargh

Malware, Threat Prevention, Unit 42

Afraidgate: Major Exploit Kit Campaign Swaps Locky Ransomware for CryptXXX

In mid-April 2016, a campaign using Nuclear Exploit Kit (EK) to distribute Locky ransomware switched to using the Angler EK to install CryptXXX ransom...

Apr 28, 2016

By Brad Duncan

Unit 42

Campaign Evolution: Darkleech to Pseudo-Darkleech and Beyond

In 2015, Sucuri published two blog posts, one in March describing a pseudo-Darkleech campaign targeting WordPress sites, and another about its evolution the following December. Sit...

Mar 22, 2016

By Brad Duncan

Threat Prevention, Unit 42

Locky Ransomware Installed Through Nuclear EK

In February 2016, Unit 42 published detailed analysis of Locky ransomware. We certainly weren’t the only ones who saw this malware, and many others have also reported on it. Since that time, Locky has been freq...

Mar 21, 2016

By Brad Duncan

Malware, Threat Prevention, Unit 42

Angler Exploit Kit Continues to Evade Detection: Over 90,000 Websites Compr...

Exploit Kits (EK), arguably the most impactful malicious infrastructure on the Internet, constantly evolve to evade detection by security technology....

Jan 11, 2016

By Yuchen Zhou and Wei Xu

Load more blogs