Vulnerabilitymedium
Evolution of the Nuclear Exploit Kit
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2010-0188 | Arbitrary Code Execution in Adobe Reader and Acrobat via Malicious PDF Handling | — | 88% | KEVRansomware | — KEV |
| CVE-2012-0507 | Type Confusion RCE in Oracle Java SE Concurrency Component | — | 98% | KEVRansomware | — KEV |
| CVE-2013-0074 | Pointer-Validation RCE in Microsoft Silverlight (KEV-listed, EOL) | — | 79% | KEVRansomware | — KEV |
| CVE-2013-2551 | Use-After-Free RCE in Microsoft Internet Explorer | — | 74% | KEVRansomware | — KEV |
| CVE-2013-7331 | Information Disclosure in Microsoft Internet Explorer Lets Pages Detect Anti-Malware | — | 50% | KEV | — KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | tulmenifica.cube-gg.com | ce, the exploit proceeded to download a payload from hxxp://tulmenifica[.]cube-gg[.]com/f/2/1410177840/3680688730/2 and save the payload as “1p |
| url | http://tulmenifica.cube-gg.com/f/2/1410177840/3680688730/2 | instance, the exploit proceeded to download a payload from hxxp://tulmenifica[.]cube-gg[.]com/f/2/1410177840/3680688730/2 and save the payload as “1palitra.exe” in the temp fold |
From the original article
6 min read at blog.talosintelligence.com
This post is co-authored by Alex Chiu , Martin Lee , Emmanuel Tacheau , and Angel Villegas . Exploit kits remain an efficient mechanism for cyber criminals to distribute malware. Such kits include exploits for multiple vulnerabilities within a single malicious webpage.
blog.talosintelligence.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.