Here is another example of an exploit page. This exploit searches for a vilnerability and then injects the malware to the computer. In this case, there are multiple files in use here. All the files are listed below with details. As with previous posts, we captured video of the exploit in action. The files are available our repository under /pnuemo-malware/1005-exploit.zip.
The first page starts the search for an vulnerability to exploit and once found, loads the binary from the next URL. It will look for vulnerabilities in Adobe Acrobat, Outlook Express, and Quicktime to name a few. The exploit page has multiple pages of obfuscated code that is too much to post. You can download the code here (.txt).
BE ADVISED: This websites may still be live. Proceed at your own risk.
We have another database update with files pulled from multiple locations. Below is information regarding each piece of malware. These are available in our repository under /pnuemo-malware/.
BE ADVISED: These sites may still be live. Proceed at your own risk.
