New exploit toolkit not so nice

October 11, 2011

At least 10,000 websites have been compromised to redirect users to a new exploit toolkit, called “Nice Pack,” according to researchers at Dell SecureWorks. Nice Pack, discovered Wednesday, attempts to take advantage of flaws in users' third-party apps, such as Java and Adobe, to install the "Zero Access Trojan," a rootkit that allows attackers to take control of a victim's machine. Though researchers are still looking into the threat, they have discovered that the JavaScript on compromised sites is nearly identical to the malicious code recently found on MySQL.com, which was infected to redirect users to the Black Hole exploit toolkit.

Angela Moscaritolo

Phishing

CrowdStrike spoofed in recruitment phishing scam

SC StaffJanuary 10, 2025

Intrusions discovered earlier this week commenced with the delivery of a malicious email purporting to be from a CrowdStrike employment agent that includes a link for downloading an employee CRM app, which when clicked redirected to a CrowdStrike-spoofing website offering Windows and macOS versions of the app, according to CrowdStrike.

Malware

New Banshee Stealer variant continues attacks on macOS devices

Steve ZurierJanuary 9, 2025

Any sense that macOS computers are immune from attacks is a farce, say security researchers.

(Image Credit: Jasmin Merdan via Getty Images)

Threat Intelligence

Thousands of deserted backdoors disrupted

SC StaffJanuary 9, 2025

Included in the discovered web shells were China Chopper — which is a fixture among advanced persistent threat operations — c99shell, and r57shell, as well as a backdoor that integrated Lazarus Group-like capabilities, according to a report from WatchTowr Labs.

Related Events

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

Related Terms

Adware Bug Buffer Overflow Disassembly