MiniDuke Espionage Malware Hits Governments in Europe Using Adobe Exploits

🗓️ 27 Feb 2013 17:17:22Reported by Michael MimosoType

New espionage malware targets governments in Europe via Adobe exploits and steganography, utilizing Twitter and AES encryption for C&C

Reporter	Title	Published	Views	Family All 61
canvas	Immunity Canvas: ACROBAT_XFA	14 Feb 201301:55	–	canvas
Tenable Nessus	Adobe Acrobat <= 11.0.1 / 10.1.5 / 9.5.3 Multiple Vulnerabilities (APSA13-02)	15 Feb 201300:00	–	nessus
Tenable Nessus	Adobe Acrobat < 11.0.2 / 10.1.6 / 9.5.4 Multiple Vulnerabilities (APSB13-07)	21 Feb 201300:00	–	nessus
Tenable Nessus	Adobe Reader <= 11.0.1 / 10.1.5 / 9.5.3 Multiple Vulnerabilities (APSA13-02)	15 Feb 201300:00	–	nessus
Tenable Nessus	Adobe Reader < 11.0.2 / 10.1.6 / 9.5.4 Multiple Vulnerabilities (APSB13-07)	21 Feb 201300:00	–	nessus
Tenable Nessus	GLSA-201308-03 : Adobe Reader: Multiple vulnerabilities	23 Aug 201300:00	–	nessus
Tenable Nessus	Adobe Reader < 11.0.2 / 10.1.6 / 9.5.4 Multiple Vulnerabilities (APSA13-02, APSB13-07) (Mac OS X)	21 Feb 201300:00	–	nessus
Tenable Nessus	openSUSE Security Update : acroread (openSUSE-SU-2013:0335-2)	13 Jun 201400:00	–	nessus
Tenable Nessus	RHEL 5 / 6 : acroread (RHSA-2013:0551)	22 Feb 201300:00	–	nessus
Tenable Nessus	SuSE 11.2 Security Update : acroread (SAT Patch Number 7397)	27 Feb 201300:00	–	nessus

Source	Link
threatpost	www.threatpost.com/miniduke-espionage-malware-hits-governments-europe-using-adobe-exploits-022713/
threatpost	www.threatpost.com/adobe-patches-sandbox-escape-vulnerability-reader-and-acrobat-022013/
securelist	www.securelist.com/en/blog/208194129/The_MiniDuke_Mystery_PDF_0_day_Government_Spy_Assembler_0x29A_Micro_Backdoor
blog	www.blog.crysys.hu/2013/02/miniduke/
web	www.web.nvd.nist.gov/view/vuln/detail
adobe	www.adobe.com/support/security/bulletins/apsb13-07.html

08 May 2013 15:59Current

8.1High risk

Vulners AI Score8.1

EPSS0.86979