Threat actorhigh
Phishing campaigns target US gov exploiting flaw CVE-2015
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2015-5119 | Use-After-Free RCE in Adobe Flash Player (ActionScript 3 ByteArray) | — | 99% | KEV | — KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| ipv4 | 107.20.255.57 | lowing IP addresses: bwxt.com dublincore.org 125.227.139.53 107.20.255.57 [adrotate banner=”9″] [adrotate banner=”12″] Pierluigi Paga |
| ipv4 | 125.227.139.53 | nked to the following IP addresses: bwxt.com dublincore.org 125.227.139.53 107.20.255.57 [adrotate banner=”9″] [adrotate banner=”12″] |
| url | http://ml.r-u.org.ua/message/ | otected] > FROM: Carrie Spencer < [email protected] > LINK: hxxp://ml.r-u.org.ua/message/ Moreover, the FBI memo reported malware activity linked to |
From the original article
2 min read at securityaffairs.com
A recent FBI memo warns phishing attacks targeted government agencies trying to exploit the CVE-2015-5119 vulnerability linked to Hacking Team data breach. According to an FBI warning, hackers have targeted US Government agencies using a recently patched Adobe Flash vulnerability ( CVE-2015-5119 ).
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.