Nuclear

Nuclear is an exploit kit. The provided content identifies Nuclear as one of the common exploit kits alongside Angler/Axpergle and Neutrino, and notes it among exploit kits such as Blackhole and Phoenix that were active historically before later kits such as Rig, Magnitude, and Grandsoft. The content states that exploit kits are automated tools used by cybercriminals to quickly identify and exploit known software vulnerabilities in order to install malware. They commonly target outdated software including Adobe Flash Player, Adobe Reader, web browsers, Oracle Java, and Sun Java. Infection vectors mentioned for exploit kits include malicious websites, email attachments, and malicious advertisements on legitimate websites. One reference states that Angler and Nuclear exploit kit developers implemented encrypted exploit delivery using Diffie-Hellman key exchange to help bypass exploit-detection appliances. Another source compares a custom espionage exploit kit used by Sednit/Sofacy to Angler and Nuclear, indicating Nuclear was a recognized benchmark for exploit-kit behavior. No high-confidence actor attribution, specific payload family, or unique indicators of compromise for Nuclear itself are provided in the content.