nyone can purchase an exploit pack (EP) license or rent time on an existing EP server. The challenge for threat actors is to redirect unsuspecting web browsing victims by force to the exploit landing page with sustained frequency. Naturally, like most criminal services in the underground, the dark art of traffic generation is a niche specialty that must be purchased to ensure drive-by campaign success. For the past year we have been tracking a threat actor (group) that compromises legitimate websites and redirects victims to EP landing pages.
read more.......http://blogs.cisco.com/security/year-long-exploit-pack-traffic-campaign-surges-after-leveraging-cdn/
read more.......http://blogs.cisco.com/security/year-long-exploit-pack-traffic-campaign-surges-after-leveraging-cdn/