Comments on: A Peek Inside the ‘Eleonore’ Browser Exploit Kit

By: Etty

Etty — Wed, 13 Jul 2011 15:37:10 +0000

Knocked my socks off with kolwnedge!

Like or Dislike: 0 0

By: Udbhav

Udbhav — Sat, 02 Jul 2011 17:39:33 +0000

What exactly are you trying to say ??

Like or Dislike: 0 0

By: Sexyman

Sexyman — Wed, 08 Dec 2010 05:50:11 +0000

I miss the Mcdonalds Arch Deluxe

Like or Dislike: 0 0

By: Tushar Vartak

Tushar Vartak — Thu, 30 Sep 2010 05:21:19 +0000

good analysis Brian, any info on the actual obfuscation methods used by the pack.. any source that is either live / distributing malware. i need this for my research..

here is some attempts from my end over phoenix

http://tusharvartak.com/2010/09/28/underground-economy-3-phoenix-exploit-kit-fake-antivirus-and-live-cc-server/

Regards,
Tushar Vartak

Like or Dislike: 0 0

By: Dave Bucci

Dave Bucci — Thu, 22 Jul 2010 15:29:52 +0000

Uhhh … unless the exploit is written in Java, JavaScript, or some other cross-platform language.

Well-loved. Like or Dislike: 5 0

By: Frundle

Frundle — Wed, 26 May 2010 12:38:41 +0000

Norton caught this attack twice. If I have the IP address and the country of origin, is there anything I can do to stop these peeps?

Like or Dislike: 0 0

By: Dallas

Dallas — Tue, 04 May 2010 22:35:34 +0000

This may be true if you follow the security stance of content filtering from one end of the spectrum, however, rather than blocking certain sites that fall into various categories of questionable web surfing, why not only allow access to certain “approved” websites people need to do their job. Kind of a “deny-all” statement (for network admins) where if its not allowed, it’s denied… No web proxy, including Opera’s, can circumvent that type of security stance. Just my two cents. — Dallas

Like or Dislike: 3 1

By: Patch more, patch faster « dr0ppedpackets

Patch more, patch faster « dr0ppedpackets — Sat, 13 Mar 2010 00:00:08 +0000

[...] They don’t mention Java in the SANS article but it should be on your list as well. This post shows how exploits are used in the real world to infect clients. Java is near the top of the [...]

Like or Dislike: 0 0

By: Browser exploit kit probe highlights need for patching, vigilance « itsec

Browser exploit kit probe highlights need for patching, vigilance « itsec — Wed, 03 Mar 2010 20:35:26 +0000

[...] Washington Post security blogger Brian Krebs took a dive into the browser exploit kit last week to reveal the holes being targeted by the kit. In addition to Adobe Reader holes, the [...]

Like or Dislike: 0 0

By: BLADE: Deshaciéndose de las descargas silenciosas | Shadow Security

BLADE: Deshaciéndose de las descargas silenciosas | Shadow Security — Sat, 27 Feb 2010 23:19:09 +0000

[...] en el navegador del visitante. El mes pasado, compartí con los lectores una mirada dentro del panel de administración web del paquete de explotación Eleonore – uno de los más populares del [...]

Like or Dislike: 0 0