logo

Blackhole Exploit Kit V2 On The Rise

ID: 8fdfb578-7773-5ccb-8591-ee37ec4742a8

STIX ID: report--8fdfb578-7773-5ccb-8591-ee37ec4742a8

Feed Name: Zscaler Security Research Blog

Threat Score
70/100

Date Published: 2025-04-02

Date Updated: 2026-05-01

...
...

**Blackhole Exploit Kit v2 observed in the wild:** The report describes Blackhole v2, highlighting dynamic URL formats, heavy JavaScript obfuscation, plugin/component detection, exploitation of known IE/Adobe/Java vulnerabilities (e.g., CVE-2006-4704), and a drive-by-download fallback that redirects victims to a fake Flash updater (update_flash_player.exe) which has been flagged as a keylogger and downloads additional malware; limited AV detection was noted in VirusTotal while ThreatExpert flagged high severity.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.