Обнаружен набор эксплоитов для последней уязвимости нулевого дня в Adobe Flash

Для осуществления атак через CVE-2015-0311 использовался модифицированный вариант набора эксплоитов Angler.

Исследователи FireEye сообщили об эксплоите для недавно исправленной уязвимости в Adobe Flash. Брешь CVE-2015-0311 стала уже второй по счету, использовать которую можно было с помощью набора эксплоитов Angler.

Ранее сообщалось , что злоумышленники применяли Angler для эксплуатации уязвимости в Adobe Flash, обнаруженной исследователем Kafeine. Через несколько дней после сообщения об этой бреши эксперты FireEye обнаружили вариант эксплоита Angler, сконфигурированный совершенно по-другому.

Подробнее: http://www.securitylab.ru/news/470578.php

ЭТО БЫЛО ВЧЕРА, НО СЕГОДНЯ В НОВОЙ ВЕРСИИ ФЛЕШ НАШЛИ 0 DAY1!11один Эксплойты на воле http://malware.dontneedcoffee.com/ http://www.digitalmunition.me/?p=4055

Warning for Adobe users! Another zero-day vulnerability has been discovered in Adobe Flash Player that is actively being exploited by cyber crooks in drive-by download attacks, security researchers warned today.
This is for the third time in last few weeks when Adobe is dealing with a zero day vulnerability in Flash Player. The Adobe Flash Player Vulnerability identified as CVE-2015-0313, exists in the latest version of Flash Player, i.e. version 16.0.0.296 and earlier.
In late January, Adobe released an updated version of its Flash player software that patches zero-day vulnerability, tracked as CVE-2015-0311, spotted by French security researcher Kafeine. This Adobe Flash Player Vulnerability was also being actively exploited via Malvertisement and drive-by-download attacks.
In case of a “drive-by-download” attack, an attacker downloads a malicious software to a victim’s computer without their knowledge or explicit consent. As a result, the flaw could allow remote attackers to take control of victims’ Macs or PCs.
On January 22, the company released an emergency update for second zero-day flaw, identified as CVE-2015-0310, that was circulating and exploited by Angler malicious toolkit.
In a security advisory released Monday, Adobe officials said that they are working on a patch and planning to release it sometime this week. The Adobe Flash Player zero-day vulnerability targets computers running all versions of Internet Explorer and Mozilla Firefox, on Windows 8.1 and earlier. In addition to Windows, the flaw affects Flash on OS X and Linux.
This newest zero-day vulnerability in Flash reportedly is being used by the Angler kit, as well. If successfully exploited, the vulnerability could cause a crash and potentially allow criminal hackers to take control of the affected system.