Vulnerabilityhigh
Stegano Exploit Kit now uses the Diffie-Hellman Algorithm
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2015-8651 | Integer Overflow in Adobe Flash Player Enables Remote Code Execution | — | 68% | KEV | — KEV |
| CVE-2016-1019 | Arbitrary code execution flaw in Adobe Flash Player, used in ransomware attacks | 9.8 | 22% | KEVRansomware | KEV |
| CVE-2016-4117 | Arbitrary Code Execution in Adobe Flash Player 21.0.0.226 and earlier | 9.8 | 94% | KEVRansomwarePoC | KEV |
| CVE-2017-0022 | Information Disclosure in Microsoft XML Core Services (MSXML) on Windows | 6.5 | 18% | KEVPoC | KEV |
From the original article
2 min read at securityaffairs.comThe Stegano exploit kit , also known as Astrum, continues to evolve, recently its authors adopted the Diffie-Hellman algorithm to hinder analysis. The Stegano exploit kit made was associated in the past with a massive AdGholas malvertising campaign that delivered malware, mostly Gozi and RAMNIT trojans. Experts at TrendMicro also observed the exploit kit in the Seamless malvertising campaign.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.