Trusted Design

CVE-2015-5122 Exploited in Strategic Web Compromise

概要

On July 14, FireEye researchers discovered attacks exploiting the Adobe Flash vulnerability CVE-2015-5122, just four days after Adobe released a patch. CVE-2015-5122 was the second Adobe Flash zero-day revealed in the leak of HackingTeam’s internal data. The campaign targeted Japanese organizations by using at least two legitimate Japanese websites to host a strategic web compromise (SWC), where victims ultimately downloaded a variant of the SOGU malware.

Created: 2026-02-23

Indicators

• hostname - amxil.opmuert.org -
• CVE - CVE-2015-5122 -
• FileHash-SHA256 - df5f1b802d553cddd3b99d1901a87d0d1f42431b366cfb0ed25f465285e38d27 -
• FileHash-MD5 - 5a22e5aee4da2fe363b77f1351265a00 -

類似Pulses

• Operation Clandestine Wolf – Adobe Flash Zero-Day APT3 Phishing (score: 0.78)
• An analysis of exploit supply chains and digital quartermasters (score: 0.75)
• Killing a Zero-Day in the Egg: Adobe CVE-2016-1019 (score: 0.74)
• Latest Flash Exploit Used in Pawn Storm (score: 0.73)
• Watering Hole Attack on Aerospace Firm Exploits CVE-2015-5122 (score: 0.72)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る