We recently identified another targeted attack campaign that leveraged both the recently announced Internet Explorer zero-day, CVE-2013-1347, as well as recently patched Java exploits CVE-2013-2423 and CVE-2013-1493. This campaign appears to have affected a number of victims based on the use of the Internet Explorer zero-day as well as the amount of traffic observed at making requests to the exploit server. This attack was likely executed by an actor we have named the 'Sunshop Group'. This actor was also responsible for the 2010 compromise of the Nobel Peace Prize website that leverage a zero-day in Mozilla Firefox.Read more...
Entries filed under 'Threat Research'
Threat Research Blog
The FireEye Labs team posts blog entries under threat research to present and discuss cyber attacks and threat intelligence from a technical perspective. They cover the full spectrum of exploits and vulnerabilities, including advanced malware and targeted threats.
May 14, 2013 3:34 PM By Amanda Stewart | Threat Research
April 23, 2013 1:30 AM By Rob Rachwald | Threat Research
April 17, 2013 3:49 PM By James T. Bennett | Threat Research
March 21, 2013 6:57 PM By Ali Islam, Alex Lanstein | Threat Research