Using Machine Learning to Stop Exploit Kits In-line in Real-time: Statistical Models Identify Obfuscated HTML
Image Description
Common Information
Type Value
UUID a7544db4-e65d-4b61-884a-c27b0c874c39
Fingerprint a7d1549114bb6c1f5a467702a1608a6e787cf4bafd353b8b96f0dbf9e198db1f
Analysis status DONE
Considered CTI value 0
Text language
Published Dec. 4, 2017, 11:36 a.m.
Added to db April 14, 2024, 12:08 p.m.
Last updated Aug. 30, 2024, 11:05 p.m.
Headline Using Machine Learning to Stop Exploit Kits In-line in Real-time: Statistical Models Identify Obfuscated HTML
Title Using Machine Learning to Stop Exploit Kits In-line in Real-time: Statistical Models Identify Obfuscated HTML
Detected Hints/Tags/Attributes 93/2/23
Attributes
Details Type #Events CTI Value
Details Domain 132
trendmicro.com
Details Domain 1
iiuwovcww.ao
Details Domain 39
heimdalsecurity.com
Details Domain 145
threatpost.com
Details Domain 89
arstechnica.com
Details Domain 3
www.talosintel.com
Details Domain 7
blogs.sophos.com
Details Domain 604
www.trendmicro.com
Details Domain 5
www.alexa.com
Details Domain 5
www.nsslabs.com
Details Email 1
jonathan_andersson@trendmicro.com
Details Email 1
josiah_hagen@trendmicro.com
Details Email 1
brandon_niemczyk@trendmicro.com
Details File 4
wp-evolution-of-exploit-kits.pdf
Details File 3
rpt-setting-the-stage.pdf
Details Url 1
https://threatpost.com/two-
Details Url 4
http://arstechnica.com
Details Url 1
http://www.talosintel.com/angler-exposed/.
Details Url 1
https://blogs.sophos.com/2015/07/21/a-closer-look-at-the-angler-
Details Url 14
http://www.trendmicro.com
Details Url 1
https://threatpost.com/persistent-
Details Url 1
http://www.alexa.com/topsites.
Details Url 1
https://www.nsslabs.com/caws/solution/.