Exposing the Angler EK: All the Naughty Bits

The Angler Exploit Kit (EK) has evolved into one of the most critical threats to users of the Information Superhighway. Try as we might, we simply cannot avoid being redirected to Angler landing pages. The simple question is: WHY DAMNIT?! This talk focuses on the ins and outs of the Angler EK. We will discuss the modern EK along with Angler's prevalence. We will then break down exactly how Angler works: We'll start with compromised site redirection methods, move to landing page de-obfuscation, review recent CVEs utilized, and end with exploit + shellcode analysis. If you'd like to know exactly how this little bastard does its dirty work, bring your butt to the talk!

Presented by