Trusted Design

Unusual Exploit Kit Targets Chinese Users

概要

Today, we are looking at an exploit kit that we have not seen before. Contrary to its counterparts, it is not used on mainstream websites or via malvertising attacks but rather it specifically targets Chinese websites and users.

Created: 2026-02-23

Indicators

• URL - http://202.172.54.119/jquery.min.js -
• URL - http://202.172.54.119/Gzr1z_ -
• CVE - CVE-2014-6332 -
• URL - http://101.99.68.18/VacnaHohoyg4.jar -
• CVE - CVE-2011-3544 -
• URL - http://101.99.68.18/jquery.min.js -
• FileHash-MD5 - 5a454c795eccf94bf6213fcc4ee65e6d -
• URL - http://101.99.68.18/EatUrj1olkO/index.html -
• URL - http://101.99.68.18//wMyB7.html -
• URL - http://101.99.68.18/e7477e4b.html -
• URL - http://101.99.68.18/v3WVUwi/index.html -
• URL - http://101.99.68.18/f5012534.html -
• CVE - CVE-2012-4681 -
• URL - http://101.99.68.18//zbxAAC5/index.html -
• URL - http://202.172.54.119/zbxAAC5/kTjAhKzI.swf -
• URL - http://101.99.68.18/Gzr1z.html -
• FileHash-MD5 - 55c447191d9566c7442e25c4caf0d2fe -
• FileHash-MD5 - 687a5f255128bd4a436cb56af697a21f -
• CVE - CVE-2014-1776 -
• URL - http://101.99.68.18//zbxAAC5/kTjAhKzI.swf -
• URL - http://101.99.68.18//WocgeHip0/8Greydikceip.swf -
• URL - http://202.172.54.119/EatUrj1olkO/VacnaHohoyg4.jar -
• FileHash-MD5 - 4e8639378d7a302c7474b5e4406dd7b4 -
• URL - http://101.99.68.18//WocgeHip0/index.html -
• URL - http://101.99.68.18/c5397063.html -
• FileHash-MD5 - 3c6e819495919a3612d42f0d8e9afdd4 -
• URL - http://101.99.68.18//c5397063.html -

類似Pulses

• Unusual Exploit Kit Targets Chinese Users,2 (score: 0.83)
• Chinese Government Website Compromised, Leads to Angler (score: 0.69)
• KaiXin Exploit Kit (score: 0.66)
• Chinese Backdoor Zegost delivered via Hacking Team exploit (score: 0.65)
• Chinese Actors attacks on US Government and EU Media (score: 0.65)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

このPulseに見つかったCVEはありません。

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る