Attackers behind the Neutrino Exploit Kit didn t take long to co-op a recently patched Internet Explorer zero-day into its arsenal. Researchers claim the kit has been pushing CVE-2016-0189, a vulnerability that was reportedly used in targeted attacks on South Korean organizations earlier this year. The vulnerability can also be exploited to achieve remote code execution, assuming a victim using IE, lands on a site hosting the exploit. In recent months a handful of malvertising and ransomware campaigns have pivoted towards kits like RIG in the wake of dying, if not already dead kits like Angler and Nuclear.
Source: https://threatpost.com/patched-ie-zero-day-incorporated-into-neutrino-ek/119321/