Trusted Design

Locky Ransomware Spreads via Flash and Windows Kernel Exploits

概要

In early April of this year a zero-day exploit (designated as CVE-2016-1019) was found in Adobe Flash Player. This particular flaw was soon used by the Magnitude Exploit Kit, which led to an Adobe out-of-cycle patch. This flaw was being used to lead to drive-by download attacks with Locky ransomware as the payload. However, this did not end the threat for users. We recently saw a new variant of this attack that added an unusual twist. On top of the Flash exploit, an old escalation of privileges exploit in Windows (CVE-2015-1701) was used to bypass sandbox technologies.

Created: 2026-02-23

Indicators

Indicatorsは見つかっていない。

類似Pulses

• Magnitude Exploit Kit Uses Newly Patched Adobe Vulnerability (score: 0.75)
• Killing a Zero-Day in the Egg: Adobe CVE-2016-1019 (score: 0.73)
• Player 1 Limps Back Into the Ring - Hello again, Locky! (score: 0.70)
• Latest Flash Exploit Used in Pawn Storm (score: 0.69)
• DirectRev Malvertising Uses Self Sufficient Flash 0Day (score: 0.67)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る