Styx Exploit Kit

The Styx Exploit Kit is a dangerous Web based malware infection that is used to infect visitors' computer systems with malware. Like other exploit kits, the Styx Exploit Kit is usually contained in a malicious website that immediately attempts to exploit numerous vulnerabilities that may be present on the victim's computer. These vulnerabilities are then used to install malware on the infected computer. Exploit kits like the Styx Exploit Kit usually rely on redirect Trojans (such as malicious Java scripts injected into legitimate websites) or on social engineering to force computer users to visit the attack website containing the exploit kit.

Exploits Associated with the Styx Exploit Kit

The Styx Exploit Kit exploits several exploits simultaneously. The majority of these exploits take advantage of vulnerabilities in Java, and there are also a high number of vulnerabilities involving Adobe software such as Acrobat Reader or Flash. One of the exploits included in Styx Exploit Kit that had caught the attention of PC security researchers is known as the TrueType Font parsing vulnerability which was seen before in Duqu, a notoriously high profile malware attack observed in 2011. These exploits are used to install a downloader Trojan on the infected computer which connects to a command and control server and downloads additional malware, which may include banking Trojans, police ransomware, and a remote access Trojan.

How to Prevent a Styx Exploit Kit Attack

Attacks involving the Styx Exploit Kit rose significantly in the last year. This is one of the many recent exploit kits that have arisen to try to topple what is still the undisputed top exploit kit on the market: the Black Hole Exploit Kit. Typically, the Styx Exploit Kit attack initiates with a redirect script or a link contained in a spam email message that directs the victim to the attack website. Once the victim visits the affected website, the Styx Exploit Kit will use a browser plug-in detection component to detect what applications are installed on the victim's computer. It will then attempt to download malicious files specifically designed to exploit the vulnerabilities mentioned above, including a malicious PDF and JAR file.

To prevent Styx Exploit Kit attacks, it is necessary to use an anti-malware program that has been updated to block domains associated with the Styx Exploit Kit. Since these domains change constantly, it is important to maintain your security software fully up to date. To protect your computer from exploits used by the Styx Exploit Kit, ESG malware researchers advise updating all of your software, especially Java and Adobe Reader.