EITest Campaign Evolution: From Angler EK to Neutrino and Rig
Unit 42 details the EITest campaign's shift from Angler to Neutrino and Rig exploit kits while distributing ransomware, downloaders, and banking trojans.
36
Malware
Vawtrak
- Mentions · 7d0
- Mentions · 30d0
- All mentions2
- First seenAug 17, 2026
- Last mentionedAug 17, 2026
Timeline
2 articles · newest firstHow the EITest Campaign's Path to Angler EK Evolved Over Time
Unit 42 documents how the EITest campaign's gate URLs and infrastructure evolved since 2014 while still routing victims to Angler EK and diverse malware.
32
Appears with
- Unit 42organization · 2
- Palo Alto Networksvendor · 2
- Angler EKmalware · 2
- Ursnifmalware · 2
- Tinbamalware · 2
- EITestthreat actor · 2
- Kovtermalware · 1
- Bartmalware · 1
- Bedepmalware · 1
- Cerbermalware · 1
- Adobe Flash Playerproduct · 1
- TeslaCryptmalware · 1
- Rig EKmalware · 1
- Gootkitmalware · 1
- Zeusmalware · 1
- CryptFile2malware · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.