{"id":16932,"date":"2019-11-19T11:10:05","date_gmt":"2019-11-19T19:10:05","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2019\/11\/19\/news-10669\/"},"modified":"2019-11-19T11:10:05","modified_gmt":"2019-11-19T19:10:05","slug":"news-10669","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2019\/11\/19\/news-10669\/","title":{"rendered":"Exploit kits: fall 2019 review"},"content":{"rendered":"

Credit to Author: J\u00e9r\u00f4me Segura| Date: Tue, 19 Nov 2019 18:08:20 +0000<\/strong><\/p>\n

Despite a slim browser market share, Internet Explorer is still being exploited in fall 2019 in a number of drive-by download campaigns. Perhaps even more surprising, we’re seeing new exploit kits emerge.<\/p>\n

Based on our telemetry, these drive-bys are happening worldwide (with the exception of a few that are geo-targeted) and are fueled by malvertising most often found on adult websites.<\/p>\n

Even though the weaponized vulnerabilities remain fairly old, we’ve observed a growing number of exploit kits go for fileless attacks<\/a> instead of the more traditional method of dropping a payload on disk. This is an interesting trend that makes sample sharing more difficult and possibly increases infection rates by evading some security products.<\/p>\n

Fall 2019 overview<\/h3>\n