Darkleech Attack Continues To Grow
ID: 8136299d-1338-5bb8-81e6-c7d315ffcea3
STIX ID: report--8136299d-1338-5bb8-81e6-c7d315ffcea3
Feed Name: Zscaler Security Research Blog
Threat Score
The report details ongoing Darkleech (Linux.Cdorked) infections that inject redirects from vulnerable Apache servers to Blackhole Exploit Kit v2 landing pages, lists dozens of compromised websites and IPs, identifies a URL pattern and user-agents used during redirection, and notes the exploits target client-side flaws (Adobe PDF, Java) while referencing CVE-2012-1557; infections appear transient, complicating tracking.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.