We assess that the actors employing this latest Flash zero-day are a suspected North Korean group we track as TEMP.Reaper.
Read more...Entries filed under '0day'
Threat Research Blog
FireEye posts blog entries under threat research to present and discuss cyber attacks and threat intelligence from a technical perspective. These blog posts cover everything from exploits and vulnerabilities, to advanced malware and targeted attacks.
Attacks Leveraging Adobe Zero-Day (CVE-2018-4878) – Threat Attribution, Attack Scenario and Recommendations
February 2, 2018 9:15 PM By FireEyeCVE-2017-0199 Used as Zero Day to Distribute FINSPY Espionage Malware and LATENTBOT Cyber Crime Malware
April 12, 2017 11:00 AM By Ben Read, Jonathan LeatheryFireEye assesses with moderate confidence that CVE-2017-0199 was leveraged by financially motivated and nation-state actors prior to its disclosure.
Read more...CVE-2017-0199: In the Wild Attacks Leveraging HTA Handler
April 11, 2017 1:30 PM By Genwei Jiang, Jonathan Leathery, Alex Berry, Rahul Mohandas, Lennard GalangFireEye recently detected malicious Microsoft Office RTF documents that leverage CVE-2017-0199, a previously undisclosed vulnerability.
Read more...Threat Actor Leverages Windows Zero-day Exploit in Payment Card Data Attacks
May 11, 2016 3:00 PM By Dhanesh Kizhakkinan, Erica Eng, Yu Wang, Dan Caselden | VulnerabilitiesIn March 2016, a financially motivated threat actor launched several tailored spear phishing campaigns primarily targeting the retail, restaurant, and hospitality industries. The emails contained variations of Microsoft Word documents with embedded macros that, when enabled, downloaded and executed a malicious downloader that we refer to as PUNCHBUGGY.
Read more...CVE-2016-1019: A New Flash Exploit Included in Magnitude Exploit Kit
April 7, 2016 8:30 AM By Genwei Jiang | ExploitsAn in-the-wild exploit kit, Magnitude EK, was exploiting a previously unknown vulnerability in Adobe Flash Player and achieving remote code execution on recent versions of Flash Player. Thanks to Adobe's new exploit mitigations, it's now failing.
Read more...Sign up for email updates
Get information and insight on today's advanced threats from the leader in advanced threat prevention.
