Reddit NetSec

AlienVault OTX General

Reddit InfoSec News

Exploit-DB RSS Feed

CIRCL OSINT Feed

ThreatFox MISP Feed

CVE Database V5

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

CVE-2018-15982 is a high-severity vulnerability affecting Adobe Flash Player, a widely used third-party software platform for multimedia content. This vulnerability allows attackers to execute arbitrary code on a victim's system through crafted Flash content, typically delivered via spearphishing attachments or malicious documents. The attack vector involves user interaction, specifically user execution of a malicious document containing embedded Flash exploit code. The exploitation leverages the vulnerability to run shellcode, potentially leading to full system compromise. Although no known exploits in the wild have been reported for this specific vulnerability, the presence of Indicators of Compromise (IOCs) and the association with common attack patterns such as spearphishing attachments (T1193) and user execution (T1204) indicate a credible threat. The use of commonly used ports (T1043) for command and control or payload delivery is also noted, emphasizing the potential for stealthy exploitation. Given that Adobe Flash Player has been deprecated and is no longer supported by Adobe as of the end of 2020, many organizations may still have legacy systems or applications relying on Flash, increasing their risk exposure. The lack of patch links suggests that remediation may require system upgrades or removal of Flash rather than simple patching. The threat level and analysis scores indicate a recognized risk but limited public exploitation data. Overall, this vulnerability represents a significant risk due to its potential for remote code execution via social engineering and the widespread historical use of Flash in enterprise environments.

Detailed information about Flash CVE-2018-15982 IOCs affecting osint source-type. Get real-time updates, technical details, and mitigation strategies.

Flash CVE-2018-15982 IOCs - Live Threat Intelligence - Threat Radar | OffSeq.com

Flash CVE-2018-15982 IOCs

Talos Blog - Smoking Guns - Smoke Loader learned new tricks

Smoke Loader is a well-known modular malware loader that has been actively used by threat actors to deliver various payloads, including banking trojans like TrickBot. The blog referenced, "Talos Blog - Smoking Guns - Smoke Loader learned new tricks," indicates that Smoke Loader has evolved with new capabilities, enhancing its evasion and persistence techniques. Although specific technical details are limited in the provided information, the association with TrickBot and shellcode malware families suggests that Smoke Loader continues to serve as a delivery mechanism for sophisticated malware campaigns. Its modular nature allows attackers to update payloads dynamically, making detection and mitigation more challenging. The malware typically employs shellcode injection techniques to execute malicious code stealthily within compromised systems. Despite the absence of known exploits in the wild at the time of the report, the medium severity rating reflects the potential risk posed by its evolving capabilities and its role in facilitating further infections.

Detailed information about Talos Blog - Smoking Guns - Smoke Loader learned new tricks. Get real-time updates, technical details, and mitigation strategies.

Title	Severity	Type	Source	Date

Threats Tagged 'ms-caro-malware-full:malware-family="shellcode"'

Filter Threats