Skip to main content

Trend Micro finds Flash exploit utilized by Russian hackers in Pawn Storm attacks

exploit
Image used with permission by copyright holder
An exploit in recent versions of Adobe Flash Player has been linked to recent cyber-attacks carried out by Russian hacker group Pawn Storm.

The group has become infamous for their high-profile attacks on targets like the German Parliament and French television network TV5Monde. The group is now targeting a global array of foreign affairs ministries, according to a report from security intelligence blog Trend Micro.

Pawn Storm is using methodology similar to that employed in cyber-attacks against the White House and NATO earlier in the year. The technique is known as spear phishing, which differs from standard phishing practices in that it targets specific individuals rather than broad swathes of users.

Emails with subject headings like ‘Syrian troops make gains as Putin defends air strikes’ and ‘Israel launches airstrikes on targets in Gaza’ were sent to targets with links purportedly leading to more information attached. These URLs would in fact lead to a platform for the Flash Player exploit to take hold.

It’s also thought that the group set up fake Outlook Web Access servers for several ministries that were targeted, which led to some credentials being stolen. Trend Micro suggests that one ministry found that its DNS settings for incoming email had been compromised as a result.

It’s worrying to see that a hacker group like Pawn Storm — also referred to as the Sofacy group and APT28 — is able to target ministries around the world with such success. However, it’s not surprising to see the organization’s reach, given the broadly held belief that the outfit maintains strong ties with the Russian government.

Trend Micro has shared its findings with Adobe, and at present the two companies are working on a method of fixing the exploit and ensuring that similar breaches don’t happen again in the future.

Editors' Recommendations

Brad Jones
Former Digital Trends Contributor
Brad is an English-born writer currently splitting his time between Edinburgh and Pennsylvania. You can find him on Twitter…
It’s time to stop believing these PC building myths
Hyte's Thicc Q60 all-in-one liquid cooler.

As far as hobbies go, PC hardware is neither the cheapest nor the easiest one to get into. That's precisely why you may often run into various misconceptions and myths.

These myths have been circulating for so long now that many accept them as a universal truth, even though they're anything but. Below, I'll walk you through some PC beliefs that have been debunked over and over, and, yet, are still prevalent.
Liquid cooling is high-maintenance (and scary)

Read more
AMD’s next-gen CPUs are much closer than we thought
AMD Ryzen 7 7800X3D held between fingertips.

We already knew that AMD would launch its Zen 5 CPUs this year, but recent motherboard updates hint that a release is imminent. Both MSI and Asus have released updates for their 600-series motherboards that explicitly add support for "next-generation AMD Ryzen processors," setting the stage for AMD's next-gen CPUs.

This saga started a few days ago when hardware leaker 9550pro spotted an MSI BIOS update, which they shared on X (formerly Twitter). Since then, Asus has followed suit with BIOS updates of its own featuring a new AMD Generic Encapsulated Software Architecture (AGESA) -- the firmware responsible for starting the CPU -- that brings support for next-gen CPUs (spotted by VideoCardz).

Read more
AMD Zen 5: Everything we know about AMD’s next-gen CPUs
The AMD Ryzen 5 8600G APU installed in a motherboard.

AMD Zen 5 is the next-generation Ryzen CPU architecture for Team Red and is slated for a launch sometime in 2024. We've been hearing tantalizing rumors for a while now and promises of big leaps in performance. In short, Zen 5 could be very exciting indeed.

We don't have all the details, but what we're hearing is very promising. Here's what we know about Zen 5 so far.
Zen 5 release date and availability
AMD confirmed in January 2024 that it was on track to launch Zen 5 sometime in the "second half of the year." Considering the launch of Zen 4 was in September 2022, we would expect to see Zen 5 desktop processors debut around the same timeframe, possibly with an announcement in the summer at Computex.

Read more