Nuclear Exploit Kit - Complete Infection Cycle

Zscaler ThreatLabZ observed a surge in Nuclear Exploit Kit activity where compromised legitimate websites redirect victims through a chain to an obfuscated EK landing page; the EK uses PluginDetect-based fingerprinting to target vulnerable browser plugins (Flash, Silverlight, PDF/Reader) and serves exploits (e.g., CVE-2013-0074, CVE-2014-0515) that drop a malware payload with low antivirus detection — the report includes URLs, IPs, and MD5 hashes as indicators.