Blackhole Exploits Kit Attack Growing

The report details the Blackhole exploit kit, a commercially sold web exploit toolkit used to deliver heavily obfuscated JavaScript, Java applets and malicious JAR/EXE payloads by exploiting known client-side vulnerabilities (notably CVE-2009-1671 and CVE-2010-1885). It highlights low antivirus detection rates for delivered binaries, thousands of malicious domains hosting the kit, and techniques (obfuscation, iframe/ASX redirects) used to evade detection and enable widespread drive-by download campaigns.