Adobe Fixes Zero-Day Flash Player Vulnerability Used in APT Attack on Russia

guest · Dec 5, 2018

Adobe Fixes Zero-Day Flash Player Vulnerability Used in APT Attack on Russia
December 5, 2018
https://www.bleepingcomputer.com/ne...r-vulnerability-used-in-apt-attack-on-russia/

Adobe has released an update for Flash Player that fixes a zero-day user after free vulnerability that was used as part of an APT attack against Russia. This attack is being named "Operation Poison Needles" and targeted the Russian FSBI "Polyclinic #2" medical clinic.

According to research from Qihoo's 360 Advanced Threat Response Team and Gigamon, on November 29, 2018 an attack was detected against Russia's FSBI "Polyclinic #2" clinic. [...] The targeted attack came in the form of a fake employee questionnaire that when opened triggered an exploit for the zero-day Flash vulnerability.

When the exploit is triggered, Word will display a warning stating "The embedded content contained in this document may be harmful to your computer.' [...] According to Gigamon, the executed command is [...]
"Since it is the first detection of this APT attack by 360 Security on a global scale, we code-named it as “Operation Poison Needles”, considering that the target was a medical institution," the 360 Core Security team stated in their report.
Click to expand...

Adobe has issued security bulletin APSB18-42 that states that Flash Player 31.0.0.153 and earlier are affected by this vulnerability, which has been assigned the CVE-2018-15982 ID. To resolve this vulnerability, users should update to version 32.0.0.101 immediately.
Click to expand...

Log in or Sign up

Adobe Fixes Zero-Day Flash Player Vulnerability Used in APT Attack on Russia

guest Guest

Log in or Sign up

Adobe Fixes Zero-Day Flash Player Vulnerability Used in APT Attack on Russia

guest Guest

Useful Searches