Threat actorcritical
APT Group UPS Targets US Government with Hacking Team Flash Exploit
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2015-3113 | Heap-Based Buffer Overflow RCE in Adobe Flash Player | — | 100% | KEV | — KEV |
| CVE-2015-5119 | Use-After-Free RCE in Adobe Flash Player (ActionScript 3 ByteArray) | — | 99% | KEV | — KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | perrydale.com | h exploit hosted on two subdomains of a legitimate website, perrydale[.]com; rpt.perrydale[.]com and report.perrydale[.]com. Both dom |
| ipv4 | 194.44.130.179 | le[.]com. Both domains resolve to the same Ukraine-based IP 194.44.130.179. There are no indications at this time that the actual webs |
| sha256 | a2fe113cc13acac2bb79a375f692b8ba5cc2fa880272adc7ab0d01f839e877ff | to these types of attacks. Indicators of Compromise SHA256 a2fe113cc13acac2bb79a375f692b8ba5cc2fa880272adc7ab0d01f839e877ff Domains rpt.perrydale[.]com report.perrydale[.]com IPs 194. |
From the original article
4 min read at unit42.paloaltonetworks.com
On July 8, 2015, Unit 42 used the AutoFocus Threat Intelligence service to locate and investigate activity consistent with a spear-phishing attack targeting the US Government. The attack exploited an Adobe Flash vulnerability that stems from the zero-day vulnerabilities exposed from this month’s Hacking Team data breach.
By Bryan Lee · unit42.paloaltonetworks.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.