Libertés Numériques

The Blackhole exploit kit has received a lot of attention recently, and we have published several technical papers on it.

The attention is warranted - the kit remains one of the most prevalent being used by criminals to infect users with malware.

In this article I am going to take a look at some of the recent attacks against legitimate websites that are being used to drive unsuspecting user traffic to the Blackhole exploit sites.

A couple of weeks ago I wrote about how we had been seeing a jump in the number of malicious .eu domain registrations, for the purpose of infecting users via drive-by downloads using an exploit kit