New zero-day in Adobe Flash Player heavily exploited in the Middle East
Several IT security companies were able to spot exploitation of a zero-day vulnerability in Adobe Flash Player against users in the Middle East.
According to published details, the attackers used a phishing attack pretending to be a popular job search website. The majority of the targeted users are in Doha and Qatar. The attack was detected on June 1, 2018.
The vulnerability in question used by the attackers is CVE-2018-5002. The exploit was delivered to users via an Excel file named “salary.xls”. The file by itself did not contain the exploit, instead, once opened, it was trying to download it.
Adobe reacted to issue very quickly and released today a security patch with version 30.0.0.113. Please, update ASAP.
This is the third zero-day vulnerability in Adobe products this year. The first vulnerability this year was also discovered in Adobe Flash (CVE-2018-4878). The second one CVE-2018-4990 was reported by ESET in Adobe Reader and fixed less than a month ago.
Our security bulletin: https://www.cybersecurity-help.cz/vdb/SB2018060720
Adobe security bulletin: https://helpx.adobe.com/security/products/flash-player/apsb18-19.html
Qihoo 360 Core Security Analysis: http://blogs.360.cn/blog/cve-2018-5002-en/
Latest Posts
Threat actors abuse DocuSign’s Envelopes API to mass-distribute fake invoices
By leveraging a legitimate platform attackers bypass traditional email security defenses.
VEILDrive threat actors exploit Microsoft services in novel C2 campaign
The campaign, suspected to be of Russian origin, has been active since early August 2024 and remains ongoing.
Hackers disable tracking for UK prison vans and courier fleets
The breach has affected tracking software provided to outsourcing company Serco used to monitor prisoner movements.