@EKwatcher profile picture
Chris Wakelin @EKwatcher
Joined November 2012
  • Tweets 20
  • Following 12
  • Followers 910
Photos and videos
Chris Wakelin retweeted
Kafeine@kafeine
13 Nov 2013
Silverlight (CVE-2013-0074) is now targeted in Exploit Kits (Angler EK) malware.dontneedcoffee.com/2… via&thx @EKwatcher
2
35
19
Looks like "Angler EK" is including a Silverlight Exploit - in preference to ones for vulnerable Flash and Java
2
4
Chris Wakelin retweeted
Kafeine@kafeine
14 Aug 2013
CVE-2013-2465 integrating Exploit Kits : spotted in Styx "Kein" - goo.gl/GzkkLW
1
20
10
Chris Wakelin retweeted
Kafeine@kafeine
27 Apr 2013
Sakura EK too : CVE-2013-2423 && Security Bypass (!!) malware.dontneedcoffee.com/2…
6
5
Chris Wakelin retweeted
Kafeine@kafeine
27 Apr 2013
Aouch !! There is no Security Warning. Seems like Neutrino is implementing : immunityproducts.blogspot.fr… for sure : "пробив приятно поднялся"
4
2
RT @TimoHirvonen: New Java exploit for CVE-2013-2423 has been introduced to RedKit. In Metasploit and Cool EK too.
1
3
3
Chris Wakelin retweeted
Kafeine@kafeine
9 Mar 2013
CVE-2013-1493 (jre 7<=15 & 6 <=41) spotted in Cool EK goo.gl/stTVJ cc @mihi42 @node5 @ekwatcher
13
2
Chris Wakelin retweeted
Kafeine@kafeine
7 Mar 2013
Hello Neutrino ! (yes, one more Exploit Kit) goo.gl/pHlPk
17
5
Chris Wakelin retweeted
Kafeine@kafeine
6 Mar 2013
Cool EK = CVE-2013-0634 and Miss LadyBoyle (dropping Reveton)
8
6
Looks like Cool EK now has one of the Java 7u11 exploits - issue 52 in seclists.org/fulldisclosure/…
9
2
Looks like Cool EK is also including the IE 8 0-day exploit (CVE-2012-4972) similar to the one in Metasploit
9
1
Chris Wakelin retweeted
Kafeine@kafeine
10 Jan 2013
The 0 day is everywhere Cool EK, Blackhole EK, Nuclear Pack and Redkit. Will publish all data soon
1
10
1
Chris Wakelin retweeted
Kafeine@kafeine
10 Jan 2013
Java 0 day Spotted and massively exploited in the Wild! Disable Java plugin now (or remove it) malware.dontneedcoffee.com/2…
6
147
18
Chris Wakelin retweeted
briankrebs
@briankrebs
7 Nov 2012
Russian forensics firm Group-IB says a new exploit being sold for $50,000 bypasses sandbox in Reader X, XI bit.ly/RWVdJ4

2
48
9
Looks like Blackhole/Cool EK have a working Java 1.7.0_07 exploit. Plus they've changed the payload and PDF URIs - lots of ":". Patch Java!
1
RT @wopot: Not A Very Nice Pack kahusecurity.com/2012/not-a-… - we've been calling this Scalaxy at #EmergingThreats
Load more