Exploit Kit Flash 3 - Angler

Using Machine Learning to Stop Exploit Kits In-line in Real-time

Angler heavily targeted Adobe Flash Player because of its widespread use and frequent vulnerabilities. Angler Exploit Kit Flash 3

The was one of the most sophisticated and prolific "crimeware-as-a-service" platforms, operating primarily between 2013 and 2016. It was notorious for its rapid adoption of Adobe Flash zero-day vulnerabilities and its ability to infect systems silently via drive-by downloads. Overview of Flash Exploitation in Angler Using Machine Learning to Stop Exploit Kits In-line

: Angler authors often integrated new Flash exploits within hours of a vulnerability being disclosed or a data dump occurring, such as the Hacking Team breach (CVE-2015-5119). Overview of Flash Exploitation in Angler : Angler

The kit typically followed a three-step process to compromise a user:

: In 2015, approximately 74% of Angler's successful exploits targeted Flash vulnerabilities. The Infection Cycle