Vulnerabilitymedium
Recently patched CVE-2018-4878 Adobe Flash Player flaw now exploited by cybercriminals
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2018-4878 | Use-After-Free RCE in Adobe Flash Player before 28.0.0.161 | 7.8 | 90% | KEVRansomwarePoC ×2 | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | safe-storage.biz | used spam emails containing a link to a document stored on safe-storage[.]biz. Once downloaded and opened, the document tries to trick |
From the original article
2 min read at securityaffairs.com
Security researchers at Morphisec have uncovered a massive hacking campaign that is exploiting the recently patched CVE-2018-4878 Adobe Flash Player vulnerability . Threat actors are exploiting the use-after-free flaw to deliver malware.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.