+- Sinisterly (https://sinister.li)
+-- Forum: General (https://sinister.li/Forum-General)
+--- Forum: World News (https://sinister.li/Forum-World-News)
+--- Thread: BlackOasis exploiting Flash zeroday (/Thread-BlackOasis-exploiting-Flash-zeroday)
BlackOasis exploiting Flash zeroday - S3xySmurf - 10-16-2017
BlackOasis have been exploiting a Flash zero-day to drop FinSpy & WingBird malware onto their targets PCs.
CVE: CVE-2017-11292
Targetted countries: Russia, Iraq, Afghanistan, Nigeria, Libya, Jordan, Tunisia, Saudi Arabia, Iran, the Netherlands, Bahrain, the United Kingdom and Angola
http://www.securityweek.com/middle-east-group-uses-flash-zero-day-deliver-spyware
A little more info on FinSpy https://en.wikipedia.org/wiki/FinFisher & WingBird http://artemonsecurity.blogspot.co.uk/2017/01/wingbird-rootkit-analysis.html