APT Group Exploiting Hacking Team Flash Zero Day
Security company Volexity said that the Wekby APT group, allegedly responsible for hitting Community Health Systems last year, is using the Hacking Team Flash Player zero-day exploit.
Malware
Ransomware Campaign Alters Variants to Evade Detection
A new, recently uncovered operation has purportedly been mutating versions of ransomware to better avoid getting detected.
Hacking Team Flash Zero Day Weaponized in Exploit Kits
Three exploit kits–Angler, Nuclear Pack and Neutrino–have already weaponized the Adobe Flash Player zero day found among the data stolen from Hacking Team.
Hacking Team officials said they have no plans to cease operations, even as they’re asking customers to stop using their surveillance products for the time being.
Adobe is expected tomorrow to patch a Flash zero day vulnerability uncovered among the data stolen in the Hacking Team breach.
The Gunpoder Android malware has co-opted a Nintendo NES game emulator and hides inside the Airpush ad library, researchers at Palo Alto Networks said.
Google has pulled a malicious click fraud app from Google Play that spoofs the popular BatteryBot Pro app.
Grant Wilcox, an ethical hacking degree candidate at the University of Northumbria in the U.K., said the Wassenaar Arrangement rules were one reason he decided not to publish exploits he developed for his dissertation.
Ad fraud malware is one of the more profitable specialties in the cybercrime world, and the attackers who use it often have to adapt their tactics in order to keep the money rolling in. One of the tactics that they have adopted in recent months is that of updating the version of Flash that’s installed on an infected machine.
Attackers have compromised the network of Italian intrusion software vendor Hacking Team and released a large cache of the company’s private documents, including customer invoices that show sales to oppressive governments.
