|Examples of referrers blacklisted|
by Blackhole exploit kit
In addition, Exploit pack known as "Incognito" (there are rumors that Incognito development stopped after v.2 in 2011 and this is something else) and Eleonore added CVE-2011-3521(? likely, see comments below) as well.
I will add "Incognito" version when I can.
This is just a quick post to share samples (kindly offered by 0Day.jp Hendrik Adrian) and found in the wild, and links to analysis that was already done for these or similar samples.