The exploit kit nonetheless has hung onto its lead as the most active EK out there this quarter.

https://www.infosecurity-magazine.com/news/rig-ek-activity-declines-in-q4/