The complete list of security products Magnitude checks can be found in the Appendix of FireEye's blog post mentioned earlier ( link). The second profiling gate checks for a list of various security or virtualization products. The first profiling gate checks for Kaspersky software. These profiling gates check the victim's system for various security products. As Malwarebytes and others have already noted, Magnitude EK includes profiling gates before it hits the actual EK domain. On, Malwarebytes posted a blog about Magnitude EK using fingerprinting gates ( link). Shown above: Fiddler dump of a Magnitude EK infection examined in the Proofpoint blog post. A closer examination of this EK will help us understand why cybercriminals still choose Magnitude for new campaigns. For this blog post, we'll look at an April 2016 infection. Such developments put Magnitude on par with advanced EKs like Angler and Nuclear. This EK continues adding new exploits, which have included recent zero-days, in its arsenal.Įarlier this month, information was posted by Kafeine at Proofpoint ( link) and Genwei Jiang at FireEye ( link) about Magnitude EK using CVE-2016-1019 as a zero-day Flash exploit. Over the years, it has become one of the most used EKs. Magnitude Exploit Kit (EK) is one of the older kits in the cyber criminal market. Hardik previously posted for this blog last year on -06.This blog post was submitted by Hardik Suri, a musician and security analyst based in Bangalore, India.GUEST BLOG ENTRY BY HARDIK SURI - A CLOSER LOOK AT MAGNITUDE EK

Jpex flash decompiler