Sundown Chronicles - Exploit Kit's Evolution

This report analyzes Sundown exploit kit activity (June–July 2016), documenting iterative changes to landing pages and payload delivery mechanisms, the delivery of NetWire RAT and Kasidet, exploitation techniques including Flash shellcode and base64-inflated JavaScript, and enumerates IOCs (file hashes, domains, hosting IPs); it concludes Sundown is less sophisticated than top EKs but actively evolving and poses an ongoing malware-delivery risk.