search

spender-sandbox / community-modified

Modified edition of cuckoo community modules
51 stars 22 forks source link

False Negative Angler Landing Page #70

Open kevross33 opened 8 years ago

kevross33 commented 8 years ago

Hi,

It appears recent Angler landing pages no longer have the malware.dontneedcoffee.com/.test() string. There is a recent landing page example here http://www.malware-traffic-analysis.net/2016/02/09/index.html

kevross33 commented 8 years ago

Appears to currently be ok in cases where silverlight being exploited