The CVE-2018-15982 is a bug that allows remote code execution in Flash Player up to 31.0.0.153, spotted in the wild as a 0day. Patched on December 05, 2018 with APSB18-42.
Underminer:
Underminer exploit kit improves in its latest iteration - 2018-12-21 - Malwarebytes
Fallout:
2019-01-16
Figure 4: Fallout exploiting CVE-2018-15982 on Windows 7 - 2019-01-16
Files: Fiddler on VT - Pcap on VT
| IOC | Type | Comment | Date |
|---|---|---|---|
| payformyattention[.]site|51.15.35[.]154 | domain|IP | Fallout EK | 2019-01-16 |
| bd31d8f5f7d0f68222517afc54f85da9d305e63a2ff639c6c535e082de13dede | SHA-256 | GandCrab Ransomware | 2019-01-16 |
Read More:
Adobe Flash Zero-Day Exploited In the Wild - 2018-12-05 - Gigamon
Underminer exploit kit improves in its latest iteration - 2018-12-21 - Malwarebytes
Article Link: http://malware.dontneedcoffee.com/2019/01/CVE-2018-15982.html