At the end of April this year, we found Astrum exploit kit employing Diffie-Hellman key exchange to prevent monitoring tools and researchers from replaying their traffic. As AdGholas started to push the exploit, we saw another evolution: Astrum using HTTPS to further obscure their malicious traffic. We spotted a new AdGholas malvertising campaign using the...
Post from: Trendlabs Security Intelligence Blog - by Trend Micro
AdGholas Malvertising Campaign Employs Astrum Exploit Kit