This prevents security software from detecting exploits based on the signature of the source URL. The user can also designate page names in the URL that are human-readable (such as "/news/index.php") to fool browser users into believing they’re following a legitimate link. Random URLs are intended to prevent antivirus companies or security professionals from using the link to download the exploit for analysis.
One of those is a random URL generation system that creates single-use web addresses for attacks that last only as long as a specific attack on a target computer. The announcement for the new version (translated on the Malware Don’t Need Coffee weblog from the original Russian, with the help of Google Translate), which Threatpost reports, was initially posted on the underground hacker marketplace site Exploit.ln, promises a number of new features to make it harder for antivirus software to detect and defend against exploit attacks. The exploit kit is offered both as a "licensed" software product for the intrepid malware server operator and as malware-as-a-service by the author off his own server. The developer of the toolkit, who goes by the handle "Paunch," recently announced the availability of Blackhole 2.0, which removes much of its trove of known and patched exploits, and replaces them with a whole new crop-along with features that will make it harder for antivirus companies and site owners to detect trouble.īlackHole is a widely-used, web-based software package which includes a collection of tools to take advantage of security holes in web browsers to download viruses, botnet trojans, and other forms of nastiness to the computers of unsuspecting victims. A new version of the BlackHole exploit kit is now out on the web and ready to start infecting.
0 kommentar(er)
