Watering Hole Attack Exploits North Korea's Flash Flaw

itman · Mar 26, 2018

An attack leveraging the compromised website of a Hong Kong telecommunications company is using a recently patched Flash vulnerability that has been exploited by North Korea since mid-November 2017, Morphisec warns.

The targeted vulnerability, CVE-2018-4878, first became public in early February, after South Korea’s Internet & Security Agency (KISA) issued an alert on it being abused by a North Korean hacker group. Adobe patched the flaw within a week.

By the end of February, cybercriminals were already abusing the vulnerability. The newly observed incident, Morphisec notes, is a textbook case of a watering hole assault. As part of such attacks, which are mainly focused on cyber-espionage, actors plant malware on websites their victims are likely to visit.

The newly observed incident revealed advanced evasive characteristics, as it was purely fileless, without persistence or any trace on the disk. Furthermore, it used a custom protocol on a non-filtered port.
Click to expand...

https://www.securityweek.com/watering-hole-attack-exploits-north-koreas-flash-flaw

EASTER · Mar 26, 2018

Poor ole Flash takes it on the chin every time. And they been getting tampered after for ages. (Time to recode?)

Log in or Sign up

Watering Hole Attack Exploits North Korea's Flash Flaw

itman Registered Member

EASTER Registered Member

Log in or Sign up

Watering Hole Attack Exploits North Korea's Flash Flaw

itman Registered Member

EASTER Registered Member

Useful Searches