China-based Cyber Threat Group Uses Dropbox for Malware Communications and Targets Hong Kong Media Outlets

🗓️ 01 Dec 2015 08:00:00Reported by FireEye Threat IntelligenceType

China-based Cyber Threat Group Uses Dropbox for Malware Communications and Targets Hong Kong Media Outlets. Threat actors used spear phishing in traditional Chinese script to target Hong Kong media organizations with malicious emails containing LOWBALL malware using Dropbox for command and control of an uncategorized advanced persistent threat (APT) group. The campaign coincided with political and economic challenges in Hong Kong and China

Reporter	Title	Published	Views	Family All 105
zdt	MS12-027 MSCOMCTL ActiveX Buffer Overflow	25 Apr 201200:00	–	zdt
zdt	MS12-027 - Office 2010 DEP/ASLR Bypass Exploit	28 Jan 201400:00	–	zdt
Gitee	Exploit for Out-of-bounds Write in Adobe Acrobat	20 Dec 201911:44	–	gitee
ICS	Top 10 Routinely Exploited Vulnerabilities	12 May 202012:00	–	ics
ICS	Potential for China Cyber Response to Heightened U.S.–China Tensions	20 Oct 202012:00	–	ics
ATTACKERKB	Microsoft Windows TabStrip MSCOMCTL.OCX RCE Vulnerability	15 Aug 201200:00	–	attackerkb
ATTACKERKB	CVE-2012-0158	10 Apr 201200:00	–	attackerkb
Information Security Automation	September 2023: VM courses, Bahasa Indonesia, Russian Podcasts, Goodbye Tinkoff, MS Patch Tuesday, Qualys TOP 20, Linux, Forrester, GigaOm, R-Vision VM	30 Sep 202319:31	–	avleonov
BDU FSTEC	The vulnerability of the MSCOMCTL.OCX component in the Microsoft Office software, the Microsoft SQL Server relational database management system, the Microsoft Commerce Server e-commerce software, and the Microsoft Visual FoxPro database development environment allows a perpetrator to execute arbitrary code.	7 Sep 202100:00	–	bdu_fstec
Carbon Black Blog	Technical Analysis: Hackers Leveraging COVID-19 Pandemic to Launch Phishing Attacks, Fake Apps/Maps, Trojans, Backdoors, Cryptominers, Botnets & Ransomware	19 Mar 202020:48	–	carbonblack