Top EK Activity Roundup – Winter 2019

This Zscaler ThreatLabZ quarterly roundup reviews exploit kit activity from the past quarter, highlighting RIG, GrandSoft and Fallout EKs that used known browser/Flash/VBScript vulnerabilities to deliver payloads including GrandCrab ransomware, Trojans and the Azorult info-stealer. The report includes infection-chain examples, geographic distributions, observed CVEs (CVE-2018-8174, CVE-2018-4878, CVE-2016-0189), sample obfuscated landing pages and redirect IPs, and recommends blocking untrusted third-party scripts, avoiding suspicious ads, and patching browsers and plugins.