Multi-function exploit kits are the root behind more online attacks.
There has been an increase in the prevalence and usage of exploit kits in recent months, a development Web security firm zScaler’s Pradeep Kulkarni attributes to hackers’ preference for the kind of multi-leveled attacks the kits provide.
In a post on zScaler’s research blog, Kulkarni said an exploit kit dubbed “Incognito” is gaining traction in the cyber underground. Incognito targets vulnerabilities in Java and Adobe products. His analysis of obfuscation techniques and URL patterns associated with Incognito illustrate the kit is carrying out multiple attack vectors, which increase the chances of a successful compromise.
The growing use of Incognito and similar tools such as the Blackhole exploit kit and Eleonore exploit kit show a trend toward using automated tools to deliver exploits. In this way attackers have the opportunity to launch frequent and effective campaigns with little technical knowledge, he said.