Top Exploit Kit Activity Roundup - Summer 2016

This Zscaler ThreatLabZ blog provides a summer 2016 roundup of exploit-kit activity: Neutrino and RIG have been actively distributing ransomware (CryptXXX, CrypMIC, Cerber) and other malware via malvertising and EITest redirectors, while Angler and Nuclear appear defunct and Sundown and Magnitude remain active; the report highlights geographic hosting patterns, payload types, and technical details such as Sundown incorporating CVE-2016-0189 and CrypMIC's plain-text C2 over TCP 443.