Locky ransomware spreading via Bizarro Sundown EK

Traffic of Sundown (above) and Bizarro Sundown (below) exploit kits
出典: https://www.tripwire.com/state-of-security/latest-security-news/bizarro-sundown-exploit-kit-distributing-locky-ransomware-via-shadowgate/

Part of code that determines the version of Flash Player installed on the system
出典: https://www.tripwire.com/state-of-security/latest-security-news/bizarro-sundown-exploit-kit-distributing-locky-ransomware-via-shadowgate/

【ニュース】

◆Locky ransomware spreading via Bizarro Sundown EK (SC Media, 2016/11/08)
https://www.scmagazine.com/locky-ransomware-spreading-via-bizarro-sundown-ek/article/571274/

【関連情報】

◆新しいエクスプロイトキット「Bizarro Sundown EK」を確認。「LOCKY」に誘導 (Trendmicro, 2016/11/07)
http://blog.trendmicro.co.jp/archives/13998