[Exploit Kit] Crimepack (3.0)

Quote:CrimePack Exploit Kit Description
Some of the most common types of hacking tools are exploit kits, commercial kits that allow hackers to create attack websites or force legitimate websites to direct computer users to attack websites. The main reason for their popularity is because criminals can use them to carry out online attacks without needing computer knowledge, but just the money to purchase a license. The CrimePack Exploit Kit is one of these kinds of hacking tools that allow even inexperienced hackers to carry out sophisticated, effective malware attacks. The CrimePack Exploit Kit is one of the most popular exploit packs available due to its easy use and the fact that the CrimePack Exploit Kit can take advantage of several common software vulnerabilities.
Exploring the CrimePack Exploit Kit
Looking at the administration website for a CrimePack Exploit Kit infection, security researchers notice that about thirty percent of all visitors to an attack website containing the CrimePack Exploit Kit will become infected with malware. This is quite a high infection rate, particularly higher than other popular exploit kits. This stat indicates that about thirty percent of all computer users have vulnerabilities in their operating system, applications or Web browser that make them vulnerable to malware attacks involving the CrimePack Exploit Kit. These are several exploits that are particularly successful associated with the CrimePack Exploit Kit. The most popular of these is Webstart, a vulnerability in the Java Runtime Environment that was fixed in the Spring of 2010. However, many computer users continue to use outdated versions of Java that make them vulnerable to these kinds of attacks. In fact, about two thirds of successful attacks involving the CrimePack Exploit Kit took advantage of this one vulnerability.

Quote:One of the best-selling exploit packs on the market today (August, 10, 2010) is called Crimepack, and its a kit that I have mentioned at least twice in previous blog posts. This time, Ill take a closer look at the ?exploit stats sections of a few working Crimepack installations to get a better sense of which software vulnerabilities are most productive for Crimepack customers.