Over the last few years the volume of malware has grown dramatically, thanks mostly to automation and exploit kits that make it easier for cybercriminals to create and distribute it. Kits are an intrinsic part of crimeware, providing not only the tools for creation and distribution of malware, but also the systems to manage networks of infected computers.

This paper provides insight into two of the most commonly used and technically capable pieces of crimeware, the Blackhole exploit kit and the ZeroAccess rootkit. We explain why these kits are so useful to the bad guys and show you how you can stop these threats from infecting your network and your users.