Skip to content
NewA calmer, faster ZeroHour

Democratic Party of Hong Kong Website Compromised and Serving Spyware

Kaspersky Securelistby @Securelist ()2 min read3 · 1 read
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2011-0611
Remote Code Execution in Adobe Flash Player via Crafted Flash Content
—99%KEV—
KEV

Indicators of compromise

auto-extracted · verify before use · export allAll
TypeIndicatorContext
domainloveusa.dyndns-blog.comemory and phones collected information off of the system to loveusa.dyndns-blog.com. The drop server is not active at this point. Because so ma

From the original article

2 min read at securelist.com

The Democratic Party of Hong Kong’s website was compromised and malware uploaded to the web server. Interestingly, the server was distributing malicious flash and spyware nearly identical to the compromised UK Amnesty International servers at the beginning of this month. The server is being cleaned up.

Kaspersky Securelist

By @Securelist · securelist.com

Read the full article at Kaspersky Securelist

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.