Attackers have increasingly exploit vulnerabilities in Silverlight

Cybercriminals have switched to the platform from Microsoft in connection with more security for Java.
In the second half of 2014 increased the number of attackers exploiting vulnerabilities in Microsoft Silverlight. This was reported in the annual report on the security of Cisco. However, Flash and Java are still considered leaders in the number of existing exploits


In 2014, the observed decrease in the number of exploits for Java. This is mainly due to the lack of new vulnerabilities in Java zero-day, the introduction of auto-update function in the Java Runtime Environment and blocking older versions of the JRE browsers.
It is also noted that cybercriminals have become much less frequent use Flash to distribute exploits. At the same time there is a significant increase in the popularity of attacks using infected PDF-documents, as well as infection with the PC via Microsoft Silverlight.
The researchers also found malicious software based on Flash, interacts with JavaScript. According to them, the exploit is divided into two separate Flash- and JS-file, making it difficult to detect and block malware antivirus products. It also helps cybercriminals to increase the effectiveness of their attacks


Source: securitylab.ru
TRANSLATION