Multiple Human Rights, Foreign Policy Sites Hacked
Summary: Shadowserver reported that hackers compromised the websites of Amnesty International Hong Kong, the Center for Defense Information, the International Institute for Counter-Terrorism, and the Cambodian Ministry of Foreign Affairs, configuring them to serve exploits for a newly patched Adobe Flash flaw (CVE-2012-0779) and a recent Oracle Java vulnerability (CVE-2012-0507). Shadowserver's Steven Adair and Ned Moran said the attackers place exploit code on sites catering to a particular set of visitors, and that patches often arrive weeks or months after exploits have been used in the wild.
Key Takeaway: Shadowserver believes many of these compromises are the work of the same hacking group, citing identical Internet addresses and files down to the same internal metadata across attacks, and the same Flash exploit is expected to be bundled into automated exploit kits sold on the cybercriminal underground.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2012-0507CVE-2012-0779
- Related
- CVE-2012-0507: Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability Known Exploited Vulnerabilities · Mar 03, 2022New Java Attack Rolled into Exploit Packs Cyber Risks ·Urgent Fix for Zero-Day Mac Java Flaw Cyber Risks ·