Exploit:SWF/Blacole.E

Exploit:SWF/Blacole.E is the detection for malicious code within specially crafted Adobe Shockwave Flash (.SWF) files. The malicious files are commonly distributed via an exploit kit, known as "Blackhole", within compromised webpages. The malware is capable of redirecting a web browser to another specified website and downloading and executing arbitrary files.

This exploit may be encountered when visiting a compromised webpage. If the malware is allowed to execute, it could result in one or more of the following actions:

• Redirecting the web browser to a specific website
• Downloading and executing arbitrary code

In the wild, this malware has been observed to be used with other malicious code that attempts to exploit vulnerabilities discussed in CVE-2011-2110, which could include other malicious .SWF files.

Analysis by Jireh Sanico