{"id":15981,"date":"2019-08-02T11:10:08","date_gmt":"2019-08-02T19:10:08","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2019\/08\/02\/news-9725\/"},"modified":"2019-08-02T11:10:08","modified_gmt":"2019-08-02T19:10:08","slug":"news-9725","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2019\/08\/02\/news-9725\/","title":{"rendered":"Say hello to Lord Exploit Kit"},"content":{"rendered":"

Credit to Author: J\u00e9r\u00f4me Segura| Date: Fri, 02 Aug 2019 18:15:24 +0000<\/strong><\/p>\n

Just as we had wrapped up our summer review of exploit kits<\/a>, a new player entered the scene. Lord EK, as it is calling itself, was caught by Virus Bulletin<\/a>‘s Adrian Luca<\/a> while replaying malvertising chains.<\/p>\n

In this blog post, we do a quick review of this exploit kit based on what we have collected so far. Malwarebytes users were already protected<\/a> against this attack. <\/p>\n

Exploit kit or not?<\/h3>\n

Lately there has been a trend of what we call pseudo-exploit kits, where a threat actor essentially grabs a proof of concept for an Internet Explorer or Flash Player vulnerability and crafts a very basic page to load it. It is probably more accurate to describe these as drive-by download attacks, rather than exploit kits.<\/p>\n

With an exploit kit we expect to see certain feature sets that include:<\/p>\n