Threat Source newsletter for May 14, 2020
Summary: Cisco Talos reported that the Astaroth malware family has targeted Brazil for nine to 12 months using lures including COVID-19-themed documents, and implements one of the most thorough sets of anti-analysis and evasion techniques Talos has seen recently. Microsoft's monthly Patch Tuesday disclosed 111 vulnerabilities, 15 rated critical, while Adobe released fixes for 36 vulnerabilities in Acrobat, Reader and DNG, 12 of them critical.
Why it matters: Astaroth's evasion techniques are among the most thorough Talos has seen recently, and the Adobe DNG SDK alone carries four heap overflow flaws (CVE-2020-9589, CVE-2020-9590, CVE-2020-9620, CVE-2020-9621) that can lead to remote code execution.
Read the original at Cisco Talos ↗
- Topics
- Malware
- Mentions
- CVE-2020-9589CVE-2020-9590CVE-2020-9620CVE-2020-9621
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026