Just as day follows night, and just as UbiSoft thinks up new and amazing game elements to strip away and charge microtransactions for, another zero-day exploit has been discovered for Adobe Flash. But this isn’t any old zero-day exploit, it’s an exploit found in the fully patched version of Flash.
The vulnerability, discovered by Trend Micro yesterday, allows attackers to secretly install malware on computers that carry Flash versions 19.0.0.185 and 19.0.0.207, and possibly earlier versions, too. Attacks exploiting the vulnerability have so far only targeted government agencies, undertaken as part of cyber-espionage initiative Operation Pawn Storm. The researchers from Trend Micro wrote:
In this most recent campaign of Pawn Storm, several Ministries of Foreign Affairs received spear phishing e-mails. These contain links to sites that supposedly contain information about current events, but in reality, these URLs hosted the exploit. In this wave of attacks, the emails were about the following topics:
“Suicide car bomb targets NATO troop convoy Kabul”
“Syrian troops make gains as Putin defends air strikes”
“Israel launches airstrikes on targets in Gaza”
“Russia warns of response to reported US nuke buildup in Turkey, Europe”
“US military reports 75 US-trained rebels return Syria”
It’s worth noting that the URLs hosting the new Flash zero-day exploit are similar to the URLs seen in attacks that targeted North Atlantic Treaty Organization (NATO) members and the White House in April this year.
Operation Pawn Storm has hit a number of foreign agencies over the last few months, including politicians and journalists in Russia and iOS devices used by Western governments and news outlets.
Oh, and don’t use Flash.
Thank you Ars Technica for providing us with this information.
Image courtesy of Wikimedia.
Corsair has just launched a new keyboard aimed at serious gamers, the K70 PRO TKL.…
FULL HD PICTURE PERFORMANCE: Elevate your viewing with this LED TV's High Definition resolution and…
HD COLOUR ENGINE: Experience vibrant visuals with this LED TV's HD Colour Engine processing chip,…
Compatibility - The wall mount shelf is compatible with wood and concrete walls. The adjustable…
GenreScience FictionFormatDVD-VideoContributorMckenna Grace, Paul Rudd, Kumail Nanjiani, Carrie Coon, Finn WolfhardLanguageEnglishRuntime1 hour and 55 minutes…
Picture Quality: 240 Mini-LED PRO Local Dimming Zones | Quantum Dot Technology | 144 Hz…