Angler EK Utilizing 302 Cushioning & Domain Shadowing
ID: 74aca25d-3969-55ba-89ae-e470cd80e064
STIX ID: report--74aca25d-3969-55ba-89ae-e470cd80e064
Feed Name: Zscaler Security Research Blog
Threat Score
This ThreatLabZ analysis documents an active Angler Exploit Kit campaign that leverages 302 cushioning redirects and domain shadowing to bypass URL-based protections, details deobfuscation of landing pages and exploit chains (including a Flash CVE-2015-0336 SWF compressed with LZMA), and shows delivery of an encrypted Carberp banking trojan; the report includes technical artifacts, decoded URI examples, and VirusTotal sample links for IOC consumption.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.