SophosLabs expert Gabor Szappanos takes a deeper look at the server-side operation of the Blackhole exploit kit. The paper also includes some excellent data on the top payloads being served-up by the exploit kit during the period of research. The final part of the technical paper is published today and includes details of the functions used in targeting client-side exploits. It’s an ideal way to equip yourselves with an understanding of how such kits are being used to infect users with malware.”]
Source: https://nakedsecurity.sophos.com/2013/01/16/technical-paper-black-hole-2/