As humans beings, we tend to be a bit lazy, at least in most of the cases. And cybercriminals are human beings, and therefore, lazy 🙂
My colleage Andrew Chang (AhnLab) has sent me aÂ MS10-002 Exploit Constructor they’ve found out in a Chinese underground web site. When you run it, and click on the bottom-left button, you obtain a html file that contains the exploit. If you can understund Chinese, it says something like “Dark Techniques Working Group”.
The resulting html file will download the file you have typed in the URL, will save it as c.exe and will execute it. Still checking it, if I find something else I’ll update the post.
Thanks NuÃ±o for the Chinese translation.