Exploit Kit still sharpens a sword

This report outlines the continued prevalence of drive-by download attacks in April 2021 despite the decline of Internet Explorer, profiling six active exploit kits (RIG, Spelevo, PurpleFox, Underminer, Bottle, Magnitude) that are leveraging recent and older vulnerabilities—especially CVE-2021-26411—to deliver malware such as PurpleFox, Hidden Bee, and Cinobi. It highlights geographic targeting (e.g., Japan, South Korea, Taiwan), the private/public status of kits, and their update cadence, concluding with the recommendation to stop using Internet Explorer to mitigate these threats.