Results 1 to 3 of 3

Thread: Exploring the Blackhole Exploit Kit by Sophos Share/Save - My123World.Com!

  1. #1
    Garage Member
    Join Date
    Aug 2012
    Location
    India
    Posts
    97
    Blog Entries
    1

    Exploring the Blackhole Exploit Kit by Sophos

    Hi,

    I recently came across a pretty explanatory analysis of Blackhole Exploit Kit by Sophos. Sure, the paper is quite old, dating back to March 2012 but nevertheless it serves as a nice start to understand how exploit kits work in general. The paper analyses Blackhole EK version 1.2.2.

    Here's link to the paper - http://nakedsecurity.sophos.com/expl...e-exploit-kit/

    And here's the table of contents:

    1. Introduction
    2. Blackhole exploit kit
    3. Code obfuscation
    4. Tracking Blackhole
    5. Discussion and conclusions
    6. Appendices


    It can be directly downloaded as PDF from -> http://sophosnews.files.wordpress.co...er_mar2012.pdf

    Hope this helps.

    Regards,
    c0dist.
    Anyone who stops learning is old, whether at twenty or eighty. Anyone who
    keeps learning stays young. The greatest thing in life is to keep your mind young.
    - Henry Ford

  2. #2
    Garage Addict 41.w4r10r's Avatar
    Join Date
    Jul 2010
    Location
    Pune
    Posts
    338
    Blog Entries
    3
    It would be cool if you can come up with some signature to detect Blackhole exploit kit detection might be through URL pattern.

  3. #3
    Garage Member
    Join Date
    Aug 2012
    Location
    India
    Posts
    97
    Blog Entries
    1
    Hi 41.w4r10r,

    To develop some signature, I would need to observe/analyze a attack that's happening in the wild or either if I can get my hands on source So, as soon as I learn more about Blackhole EK, I'll surely put it on forum.

    In the meantime, I found a Yara signature for BlackHole EK V2 from a quick Google search.

    http://blog.lab69.com/2012/09/an-eve...ploit-kit.html

    Regards,
    c0dist.
    Anyone who stops learning is old, whether at twenty or eighty. Anyone who
    keeps learning stays young. The greatest thing in life is to keep your mind young.
    - Henry Ford

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •