Vulnerabilitymedium
Talos discovered Spelevo EK, an exploit kit spreading via B2B Website
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2018-15982 | Use-After-Free in Adobe Flash Player Allows Arbitrary Code Execution | 7.8 | 90% | KEVRansomwarePoC | KEV |
| CVE-2018-8174 | Out-of-Bounds Write RCE in Microsoft Windows VBScript Engine | 7.5 | 88% | KEVRansomwarePoC ×2 | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | ezylifebags.com.au | ion gate used for the campaign. The gate is being hosted at ezylifebags[.]com[.]au, but experts also noticed a request for another JavaScr |
| domain | your-prizes-box.life | ticed a request for another JavaScript file being hosted at your-prizes-box[.]life. “However, this request doesn’t result in anything but ad |
From the original article
2 min read at securityaffairs.com
Researchers at Cisco Talos group have discovered a new exploit kit dubbed Spelevo that spreads via a compromised business-to-business website. Malware researchers at Cisco Talos have discovered a new exploit kit dubbed Spelevo that spreads via a compromised business-to-business website.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.