Five-Year 'Dust Storm' APT Campaign Seen Targeting Japanese Critical Infrastructure

🗓️ 24 Feb 2016 14:11:04Reported by Chris BrookType

Five-Year 'Dust Storm' APT Campaign targeting Japanese critical infrastructure, focused on extracting sensitive information from oil, gas, and electric utilities. Utilizes dynamic DNS domains, customized backdoors, Android Trojans, and phishing attacks

Reporter	Title	Published	Views	Family All 109
zdt	Adobe Flash Player 10.2.153.1 SWF Memory Corruption Vulnerability	17 Apr 201100:00	–	zdt
zdt	Microsoft XML Core Services MSXML Uninitialized Memory Corruption	16 Jun 201200:00	–	zdt
FreeBSD	linux-flashplugin -- remote code execution vulnerability	20 Jan 201100:00	–	freebsd
Tenable Nessus	Google Chrome < 10.0.648.205 Multiple Vulnerabilities	14 Apr 201100:00	–	nessus
Tenable Nessus	Flash Player < 10.2.159.1 Unspecified Memory Corruption (APSB11-07)	18 Apr 201100:00	–	nessus
Tenable Nessus	Google Chrome < 10.0.648.205 Multiple Vulnerabilities	14 Apr 201100:00	–	nessus
Tenable Nessus	Adobe Acrobat 9.x / 10.x Multiple Vulnerabilities (APSB11-08)	15 Apr 201100:00	–	nessus
Tenable Nessus	Adobe AIR < 2.6.0.19140 ActionScript Predefined Class Prototype Addition Remote Code Execution (APSB11-07)	18 Apr 201100:00	–	nessus
Tenable Nessus	Adobe Reader 9.x / 10.x Multiple Vulnerabilities (APSB11-08)	15 Apr 201100:00	–	nessus
Tenable Nessus	Flash Player < 10.2.159.1 ActionScript Predefined Class Prototype Addition Remote Code Execution (APSB11-07)	18 Apr 201100:00	–	nessus

Source	Link
cylance	www.cylance.com/hubfs/2015_cylance_website/assets/operation-dust-storm/Op_Dust_Storm_Report.pdf
t	www.t.co/jq8fwhObyQ
twitter	www.twitter.com/hashtag/opduststorm
t	www.t.co/kG4X6hmJiG
twitter	www.twitter.com/cylanceinc/status/702149003945709568

03 Mar 2016 00:39Current

8.8High risk

Vulners AI Score8.8

EPSS0.9941