Trusted Design

Operation RussianDoll

概要

FireEye Labs recently detected a limited APT campaign exploiting zero-day vulnerabilities in Adobe Flash and a brand-new one in Microsoft Windows. Using the Dynamic Threat Intelligence Cloud (DTI), FireEye researchers detected a pattern of attacks beginning on April 13th, 2015. Adobe independently patched the vulnerability (CVE-2015-3043) in APSB15-06. Through correlation of technical indicators and command and control infrastructure, FireEye assess that APT28 is probably responsible for this activity.

Created: 2026-02-23

Indicators

• domain - ssl-icloud.com -
• domain - updatecenter.name -
• domain - pass-google.com -
• domain - nato-press.com -
• domain - drivers-update.info -
• CVE - CVE-2014-0515 -
• domain - securitypractic.com -
• CVE - CVE-2015-3043 -
• CVE - CVE-2015-1701 -

類似Pulses

• Multiple Chinese APT Groups Quickly Use Flash Zero-Day (score: 0.76)
• EPS Processing Zero-Days Exploited by Multiple Threat Actors (score: 0.71)
• Operation Clandestine Wolf – Adobe Flash Zero-Day APT3 Phishing (score: 0.70)
• APT Group Wekby Leveraging Adobe Flash Exploit (score: 0.69)
• Killing a Zero-Day in the Egg: Adobe CVE-2016-1019 (score: 0.69)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る