Magnitude Exploit Kit leading to Cerber Ransomware
ID: 48ab7789-81de-5824-be74-0b553fc7093d
STIX ID: report--48ab7789-81de-5824-be74-0b553fc7093d
Feed Name: Zscaler Security Research Blog
Threat Score
Zscaler ThreatLabZ observed a malvertising campaign on the pirated streaming site gomovies.to that redirected visitors (notably from East and Southeast Asia) through Magnitude EK gates, used Flash/browser fingerprinting and exploited CVE-2016-0189 to deliver Cerber ransomware (files encrypted with .8840); the report includes deobfuscated scripts, exploit chain details, screenshots, and multiple IOCs.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.