Chinese Hackers Compromised Forbes.com Using IE, Flash Zero Days

🗓️ 11 Feb 2015 16:07:36Reported by Chris BrookType

Chinese hackers exploited zero day vulnerabilities in IE and Flash to hack Forbes.com, aiming for U.S. defense and financial firms, using a watering hole attack and a malicious .DL

Reporter	Title	Published	Views	Family All 68
zdt	Adobe Flash Player parseFloat Stack Buffer Overflow Remote Code Execution Vulnerability	10 Dec 201400:00	–	zdt
Tenable Nessus	Flash Player < 16.0.0.235 Multiple Vulnerabilities (APSB14-27)	22 Dec 201400:00	–	nessus
Tenable Nessus	Flash Player < 15.0.0.243 (inferred) Multiple Vulnerabilities (APSB14-27)	22 Dec 201400:00	–	nessus
Tenable Nessus	Flash Player <= 15.0.0.239 Multiple Vulnerabilities (APSB14-27)	9 Dec 201400:00	–	nessus
Tenable Nessus	GLSA-201412-07 : Adobe Flash Player: Multiple vulnerabilities	15 Dec 201400:00	–	nessus
Tenable Nessus	Google Chrome < 39.0.2171.95 Multiple Vulnerabilities	9 Dec 201400:00	–	nessus
Tenable Nessus	Flash Player For Mac <= 15.0.0.239 Multiple Vulnerabilities (APSB14-27)	9 Dec 201400:00	–	nessus
Tenable Nessus	Google Chrome < 39.0.2171.95 Multiple Vulnerabilities (Mac OS X)	9 Dec 201400:00	–	nessus
Tenable Nessus	openSUSE Security Update : flash-player (openSUSE-SU-2014:1629-1)	15 Dec 201400:00	–	nessus
Tenable Nessus	RHEL 6 : flash-plugin (RHSA-2014:1981)	15 Dec 201400:00	–	nessus

Source	Link
isightpartners	www.isightpartners.com/2015/02/codoso/
threatpost	www.threatpost.com/adobe-patches-flash-player-vulnerability-under-attack/109773
threatpost	www.threatpost.com/monster-ie-update-top-patch-tuesday-priority/110978
invincea	www.invincea.com/2015/02/chinese-espionage-campaign-compromises-forbes/
media	www.media.threatpost.com/wp-content/uploads/sites/103/2015/02/07005659/report_graphic_1.png
washingtonpost	www.washingtonpost.com/blogs/the-switch/wp/2015/02/06/the-switchboard-chinese-hackers-may-be-responsible-for-the-anthem-breach/
threatpost	www.threatpost.com/anthem-data-breach-could-affect-millions-of-consumers/110867
threatpost	www.threatpost.com/ie-8-zero-day-pops-up-in-targeted-attacks-against-korean-military-sites/100728
twitter	www.twitter.com/share

11 Feb 2015 21:07Current

7High risk

Vulners AI Score7

EPSS0.33581