Neutrino

Job314 - Neutrino Rebooted - Neutrino-v - Status: Retired - Last seen 2017-04-10

References:
  • Hello Neutrino ! (just one more Exploit Kit) - 2013-03-07 - MDNC - Kafeine Neutrino
  • Neutrino : The come back ! (or Job314 the Alter EK) - 2014-11-21 - MDNC - Kafeine Neutrino CVE-2014-6332 CVE-2014-0569 Necurs
  • RIG evolves, Neutrino waves goodbye, Empire Pack appears - 2016-10-22 - MDNC - Kafeine RIG Empire Neutrino Angler Nuclear Sutra BlackHole
  • More Reading:

  • Dridex Actors Get In the Ransomware Game With "Locky" - 2016-02-16 - Proofpoint - Proofpoint Staff Locky Neutrino TA505
  • CVE-2016-1019 (Flash up to 21.0.0.182/187) and Exploit Kits - 2016-04-08 - MDNC - Kafeine CVE-2016-1019 Nuclear Magnitude Cerber Neutrino
  • Neutrino EK: more Flash trickery - 2016-08-12 - Malwarebytes - Jérôme Segura NeutrAds Neutrino
  • Domain Shadowing: HillaryNixonClinton.com Shadowed Domains Lead to Neutrino EK - 2016-08-12 - RiskIQ - Mike Wyatt WordsJS Neutrino
  • Talos ShadowGate Take Down: Global Malvertising Campaign Thwarted - 2016-09-01 - Talos - Nick Biasini WordsJS Neutrino
  • CVE-2017-0022: Microsoft Patches a Vulnerability Exploited by AdGholas and Neutrino - 2017-03-24 - Trend Micro - Brooks Li - Henry Li CVE-2017-0022 AdGholas NeutrAds Neutrino
  • Threat Actor Profile: KovCoreG, The Kovter Saga - 2017-11-01 - Proofpoint - Kafeine Kovter KovCoreG Angler Sweet Orange Nuclear Sakura BlackHole Neutrino Fiesta Styx EITest