There have been interesting developments with exploit kits in the past few months to say the least, with the disappearance of some and the birth of others. However, one thing we noticed is that the new kits aren’t new per se, but rather variants or VIP versions of their predecessors.
Kahu Security recently published a beautiful visual (Wild Wild West – 11/2016) showing past and present crime kits. In this post we take a look at traffic captures collected from our own honeypots and via our telemetry, knowing that this is truly a snapshot at a particular time, as EKs keep on evolving.
