Cybercriminals are taking a page from the software-as-a-service playbook: they’re now selling exploit kits complete with hosting services, with customers paying for the length of time the exploits are actively infecting computers. The kits offer several kinds of exploits, or sequences of codes that can take advantage of software vulnerabilities in order to deliver malware. Researchers from Seculert have found that at least a couple of these kits — Incognito 2.0 and Bomba — offer their own Web hosting as well as a Web-based management interface.






