An exploit kit, also known as crimepacks, is available for purchase for only a few hundred dollars. The software gives criminals complete, real-time information about the machines it has impacted. Criminals are creating “good-guy blacklists” to keep security vendors and analysts at bay, says Sophos’ James Lyne. Lyne: “The techniques were using against them in 2011 and 212, they are using back against us,” he says. The kit reveals just how crafty criminals have become in covering their tracks.”]
Source: https://www.csoonline.com/article/2112406/video-how-a-crimepack-works.html