Entries filed under '0day'

Threat Research Blog

The FireEye Labs team posts blog entries under threat research to present and discuss cyber attacks and threat intelligence from a technical perspective. They cover the full spectrum of exploits and vulnerabilities, including advanced malware and targeted threats.

CVE-2017-0199 Used as Zero Day to Distribute FINSPY Espionage Malware and LATENTBOT Cyber Crime Malware

April 12, 2017 11:00 AM By Ben Read, Jonathan Leathery | Threat Research

FireEye assesses with moderate confidence that CVE-2017-0199 was leveraged by financially motivated and nation-state actors prior to its disclosure.

Tags: 0-day, 0day, 0day exploits, Ben Read, Blog, Jonathan Leathery, Latest Blog Posts, Malware, Threat Research, Zero-day, Zero-day Attacks and Zero-day Vulnerability

CVE-2017-0199: In the Wild Attacks Leveraging HTA Handler

April 11, 2017 1:30 PM By Genwei Jiang, Alex Berry, Jonathan Leathery, Lennard Galang , Rahul Mohandas | Threat Research

FireEye recently detected malicious Microsoft Office RTF documents that leverage CVE-2017-0199, a previously undisclosed vulnerability.

Tags: 0-day, 0day, 0day exploits, Alex Berry, Blog, Genwei Jiang, Homepage Carousel, Jonathan Leathery, Latest Blog Posts, Lennard Galang , Malware, Rahul Mohandas, Threat Research, Zero-day, Zero-day Exploit and Zero-day Vulnerability

Threat Actor Leverages Windows Zero-day Exploit in Payment Card Data Attacks

May 11, 2016 3:00 PM By Dhanesh Kizhakkinan, Dan Caselden, Erica Eng, Yu Wang | Threat Research, Vulnerabilities

In March 2016, a financially motivated threat actor launched several tailored spear phishing campaigns primarily targeting the retail, restaurant, and hospitality industries. The emails contained variations of Microsoft Word documents with embedded macros that, when enabled, downloaded and executed a malicious downloader that we refer to as PUNCHBUGGY.

Tags: 0-day, 0day, 0day exploits, Dan Caselden, Dhanesh Kizhakkinan, Erica Eng, Threat Research, Vulnerabilities, Yu Wang, Zero-day Exploit and Zero-day Vulnerability

CVE-2016-1019: A New Flash Exploit Included in Magnitude Exploit Kit

April 7, 2016 8:30 AM By Genwei Jiang | Exploits, Threat Research

An in-the-wild exploit kit, Magnitude EK, was exploiting a previously unknown vulnerability in Adobe Flash Player and achieving remote code execution on recent versions of Flash Player. Thanks to Adobe's new exploit mitigations, it's now failing.

Tags: 0-day, 0day, Blog, Exploit, Exploit Kits, Exploitkit, Exploits, Exploits, Flash, Genwei Jiang, Latest Blog Posts and Threat Research