Ransomwarecritical
Fessleak malvertising campaign used to serve ransomware
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2015-0016 | Directory Traversal Privilege Escalation in Microsoft Windows TS WebProxy | — | 76% | KEV | — KEV |
| CVE-2015-0311 | Use-After-Free Remote Code Execution in Adobe Flash Player | — | 86% | KEV | — KEV |
| CVE-2015-0313 | Use-After-Free Remote Code Execution in Adobe Flash Player | — | 95% | KEV | — KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | answers.com | om HuffingtonPost.com Photobucket.com DNSrsearch.com RT.com Answers.com CBSSports.com HowtoGeek.com Fark.com Inquisitr.com Viewmixe |
| domain | cbssports.com | nPost.com Photobucket.com DNSrsearch.com RT.com Answers.com CBSSports.com HowtoGeek.com Fark.com Inquisitr.com Viewmixed.com Thesauru |
| domain | dnsrsearch.com | ansomware: Liucianne.com HuffingtonPost.com Photobucket.com DNSrsearch.com RT.com Answers.com CBSSports.com HowtoGeek.com Fark.com Inq |
| domain | howtogeek.com | obucket.com DNSrsearch.com RT.com Answers.com CBSSports.com HowtoGeek.com Fark.com Inquisitr.com Viewmixed.com Thesaurus.com Dictiona |
| domain | huffingtonpost.com | domains have been used to spread Ransomware: Liucianne.com HuffingtonPost.com Photobucket.com DNSrsearch.com RT.com Answers.com CBSSports |
| domain | liucianne.com | the following domains have been used to spread Ransomware: Liucianne.com HuffingtonPost.com Photobucket.com DNSrsearch.com RT.com An |
| domain | photobucket.com | used to spread Ransomware: Liucianne.com HuffingtonPost.com Photobucket.com DNSrsearch.com RT.com Answers.com CBSSports.com HowtoGeek.c |
| domain | retilio.com | at Fessleak, and specifically, one of his “burner” domains, retilio.com was seen to use the same zero-day in this blog post here .” |
| domain | rt.com | ianne.com HuffingtonPost.com Photobucket.com DNSrsearch.com RT.com Answers.com CBSSports.com HowtoGeek.com Fark.com Inquisitr. |
From the original article
4 min read at securityaffairs.com
Invincea has been monitoring the Fessleak campaign in which hackers leveraged Adobe Flash Player exploits and file-less infections to serve ransomware. Security experts from Invincea are investigating on a new Ransomware campaign originated in Russia that presented many interesting characteristics.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.