ICT Security-Sécurité PC et Internet

A new exploit kit hit the scene recently, and according to Arseny Levin of Spiderlabs, the RedKit exploit kit contains an API that generates new host-site URLs every hour.

Researchers from SpiderLabs found the RedKit on some compromised church website where the kit was being promoted by a banner ad. Users that clicked the ad were redirected to a page that requested their Jabber username.

In this way, Levin claims, the RedKit developers can easily pick and choose which individuals they sell their services to.

Read more...

A new exploit kit that Trustwave researchers have spotted being used in the wild is aiming to enter a market that is practically monopolized by the widely famous BlackHole and Phoenix exploit kits.

To deliver the malware, RedKit exploits two popular bugs: the Adobe Acrobat and Reader LibTIFF vulnerability (CVE-2010-0188) and the Java AtomicReferenceArray vulnerability (CVE-2012-0507), lately used by the criminals behind the massive Flashback infection.

Read more...