logo

Exploit kits go Cryptomining

ID: 86b4d3f3-ada9-5b54-a885-ca7e24560d66

STIX ID: report--86b4d3f3-ada9-5b54-a885-ca7e24560d66

Feed Name: Zscaler Security Research Blog

Threat Score
72/100

Date Published: 2025-04-02

Date Updated: 2026-05-01

...
...

### Executive Summary This quarterly analysis details sustained exploit kit activity—primarily RIG, GrandSoft, and KaiXin—using malvertising and browser exploits (CVE-2018-8174, CVE-2016-0189) to deliver cryptominers, trojans and GandCrab ransomware; the report documents fingerprinting and obfuscation techniques, geographic hit patterns, exploit landing page behavior, and observed payloads, and recommends blocking untrusted third-party scripts and keeping browsers/plugins patched.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.