MALWARE-CNC Phoenix exploit kit post-compromise behavior

IPS-SWG

1 SID: 21860

Stats

First seen: January 2022
Last seen: September 2026

Description

Detects exploit kit activity that stages browser exploits and malware delivery associated with the Phoenix malware family.

Related malware families

CVE-2007-5659 CVE-2008-2992 CVE-2008-5353 CVE-2009-0927 CVE-2009-4324 CVE-2010-0188 CVE-2010-0840 CVE-2010-1297 CVE-2011-2110 CVE-2011-3544 CVE-2012-0507 CVE-2012-0779 Phoenix

Related blogs

Fake CAPTCHA, Real Business: Traffic Distribution for Hire

Fake CAPTCHA, Real Business: Traffic Distribution for Hire

August 4, 20268 min read

Pony Malware - How to Protect User and Wallet Data

Pony Malware - How to Protect User and Wallet Data

January 24, 20186 min read