Slashdot Mirror

← Back to Stories (view on slashdot.org)

New Flash Vulnerability Being Exploited In the Wild (trendmicro.com)

Posted by Soulskill on from the it-must-be-tuesday dept.

An anonymous reader writes: Researchers from Trend Micro report a new attack on fully-patched versions of Adobe Flash. The attacks originate from an espionage campaign run by the group known as Pawn Storm, and seem to target only government agencies. "Ministries of Foreign Affairs have become a particular focus of interest for Pawn Storm recently. Aside from malware attacks, fake Outlook Web Access (OWA) servers were also set up for various ministries. These are used for simple, but extremely effective, credential phishing attacks. One Ministry of Foreign Affairs got its DNS settings for incoming mail compromised. This means that Pawn Storm has been intercepting incoming e-mail to this organization for an extended period of time in 2015."

2 of 101 comments (clear)

  1. Uninstall it. by BrendaEM · · Score: 3, Interesting

    I uninstalled Flash on my computers, and the world did not end.

    --
    https://www.youtube.com/c/BrendaEM
  2. Re:And here we go....... by Anonymous Coward · · Score: 0, Interesting

    You mean another reason to not use Flash?

    AdBlock... nothing to do with Flash. This is for blocking ads. While some ads are built in Flash, most are images or text or HTML5 based.

    NoScript... A) If you are still blocking javascript you better adjust your tinfoil hat. b) Last website update for this plugin was in March of 2014, over a year ago... the plugin may have been recently updated however there is no clear log of dates. c) If Flash is an issue for you, just don't install it.

    The problem is some people need Flash. Blocking it doesn't fix vulnerabilities. If your neighbors house is broken in to, do you tell them to board up all their doors and windows? Does that fix the broken locks and latches on their doors and windows? No! it covers them up and they still need to be un-covered so they are useful. What you should be telling you neighbors to do is to call the lock or latch company and ask for them to provide a solution for the easy lock or latch breaking techniques. However if these locks were given to you for free so you could use the keys from your Key company, then the Lock company is not your concern. You must contact the Key company and ask them to use different locks or you will not purchase their keys anymore in the future as you will be changing your locks.