Elderwood zero-day toolkit is in more widespread use

Easy-to-use Elderwood is being distributed to more than one hacker team
Easy-to-use Elderwood is being distributed to more than one hacker team

Research by security firm Symantec has shown that the Elderwood platform is a more widespread threat than previously believed.

The zero-day exploit toolkit first surfaced in 2012, but 2014 has seen its adoption by a larger array of hackers, with three zero-day vulnerabilities detected in one month alone.

Symantec said in a blog post that it initially believed Elderwood was used by just one group, but newer findings suggest it is either the work of a major hacking organisation, which has developed it for numerous in-house attack teams, or it is being sold to a wider range of outside groups.

'Serious threat'

Elderwood has been used to attack important sectors like defence, manufacturing, IT, and human rights.

There have been some recurring trends, such as the use of Internet Explorer and Flash, and the attacks can also be reverse-engineered by other groups to produce new ones.

Part of the threat of the Elderwood toolkit is that it is user-friendly, making it usable by even someone who is not technically proficient. It is this same approach that has made DDoS toolkits so popular, and so disruptive.

Symantec labelled Elderwood as a "serious threat," and that groups using it are well-resourced and highly motivated hackers.

Via Computer World

Latest in Security
Data Breach
Thousands of healthcare records exposed online, including private patient information
China
Juniper patches security flaws which could have let hackers take over your router
Representational image depecting cybersecurity protection
GitLab has patched a host of worrying security issues
Ai tech, businessman show virtual graphic Global Internet connect Chatgpt Chat with AI, Artificial Intelligence.
AI agents can be hijacked to write and send phishing attacks
China
Volt Typhoon threat group had access to American utility networks for the best part of a year
Abstract image of cyber security in action.
MassJacker malware targets those looking for pirated software
Latest in News
A super close up image of the Google Gemini app in the Play Store
It's official: Google Assistant will be retired for phones this year, with Gemini taking over
Quordle on a smartphone held in a hand
Quordle hints and answers for Sunday, March 16 (game #1147)
NYT Strands homescreen on a mobile phone screen, on a light blue background
NYT Strands hints and answers for Sunday, March 16 (game #378)
NYT Connections homescreen on a phone, on a purple background
NYT Connections hints and answers for Sunday, March 16 (game #644)
Three iPhone 16 handsets on show
Apple could launch an iPhone 17 Ultra this year – but we've heard these rumors before
Super Mario Odyssey
ChatGPT is the ultimate gaming tool - here's 4 ways you can use AI to help with your next playthrough