A new exploit kit that researchers named Spelevo has emerged recently targeting a certain category of victims with two banking trojans. The exploit kit uses a business-to-business (B2B) website to drop infamous banking Trojans IceD and Dridex. The latest exploits preferred by these browser-based threats are Internet Explorer s CVE-2018-8174, and Adobe Flash’s CVE-2019-4878, as noted by Malwarebytes most recent in their most recent seasonal EK report.
Source: https://www.bleepingcomputer.com/news/security/new-exploit-kit-spelevo-carries-bag-of-old-tricks/