Skip to content
tempatnakal.com

tempatnakal.com

An Adobe Flash 0day is being actively exploited in the wild

Holly Clancy, February 8, 2018

Enlarge / A screenshot of the malicious Excel document spreading a Flash zeroday. (credit: Talos)

An increasingly sophisticated hacking group is exploiting a zero-day vulnerability in Adobe’s Flash Player that lets them take full control of infected machines, researchers said Friday.

The critical, use-after-free vulnerability, which is indexed as CVE-2018-4877, resides in the latest version of the widely installed Flash, researchers from Cisco Systems’ Talos group said in a blog post. Adobe said separately that versions earlier than current Flash 28.0.0.137 are also susceptible. The vulnerability came to light on Wednesday when South Korea’s CERT issued an advisory warning that attack code was circulating in the wild that exploited the zeroday flaw.

Talos said the exploit is being distributed through a Microsoft Excel document that has a malicious Flash object embedded into it. Once the SWF object is triggered, it installs ROKRAT, a remote administration tool Talos has been tracking since January 2017. Until now, the group behind ROKRAT—which Talos calls Group 123—has relied on social engineering or exploits of older, previously known vulnerabilities that targets hadn’t yet patched. This is the first time the group has used a zeroday exploit.

Read 5 remaining paragraphs | Comments

Technology

Post navigation

Previous post
Next post

Categories

Archives

Recent Posts

  • Top 10 Best _tkinter.tclerror: No Display Name And No $display Environment Variable Comparison

  • Top 10 Best What Do You Use A Trivet For? Comparison

  • Men’s Sweater in Turkey

  • Long Tuxedo Jacket Men

  • Top 10 Best Fishing Reel For Crossbow Comparison

  • Top 10 Best Trivets Square Comparison

  • Top 10 Best Stereo Microphone Set Comparison

  • Top 10 Best Penn Special Senator Star Drag Conventional Fishing Reel Comparison

  • Top 10 Best Operands Could Not Be Broadcast Together With Shapes Comparison

  • Big Collar Sweater Mens

  • Top 10 Best Stereo Microphone Array Comparison

  • White Khaki Short for Men’s

  • Slain deputy remembered as a 'great hero' at funeral

  • Men Packable Down Jacket Clearance

  • Top 10 Best Stainless Steel Trivet Ikea Comparison

  • Wool Turtleneck Sweaters Mens

  • Top 10 Best Kast King Neoprene Fishing Reel Covers Comparison

  • Top 10 Best Open Face Deep Sea Fishing Reel Comparison

  • Top 10 Best Trivets Mat Walmart Comparison

  • Comedian Amber Ruffin Is Nailing It

  • Mens Elastic Drawstring Cargo Short

  • Top 10 Best Zara Trench Coat Mens Comparison

  • Knit Bomber Jacket Mens

  • Top 10 Best Shakespear Fishing Reel Parts Comparison

  • Top 10 Best Choosing Fishing Line Comparison

  • Top 10 Best 30 Lb Line Fishing Reels Comparison

  • Giant Swatch Watch Wall Clock

  • Top 10 Best Mechanical Fisher Yoyo Automatic Fishing Reels Comparison

  • Top 10 Best Reaper Fishing Rod Comparison

  • Ousmane Who? Semedo shows exactly why he’s Alves’ heir apparent

©2025 tempatnakal.com | WordPress Theme by SuperbThemes