Trusted Design

UPS: Observations on CVE-2015-3113

概要

A June 23 FireEye blog post titled “Operation Clandestine Wolf” discussed a cyber espionage group, known as APT3, that had been exploiting a zero-day vulnerability in Adobe Flash. Unit 42 also tracks the APT3 group using the name UPS, which is an intrusion set with Chinese origins that is known for having early access to zero-day vulnerabilities and delivering a backdoor called Pirpi.

Created: 2026-02-23

Indicators

類似Pulses

APT Group UPS Targets US Government with HT Flash Exploit (score: 0.78)
Operation Clandestine Wolf – Adobe Flash Zero-Day APT3 Phishing (score: 0.72)
Multiple Chinese APT Groups Quickly Use Flash Zero-Day (score: 0.71)
Operation RussianDoll (score: 0.65)
An analysis of exploit supply chains and digital quartermasters (score: 0.65)

このPulseに関連する脅威アクター (事実ベース)

Ember Bear

Score: 9.65

Matched TTPs:

T1491.002 - External Defacement
T1070.004 - File Deletion
T1588.005 - Exploits

MITREへのリンク →

Sandworm Team

Score: 9.36

Matched TTPs:

T1491.002 - External Defacement
T1588.006 - Vulnerabilities
T1070.004 - File Deletion

MITREへのリンク →

Volt Typhoon

Score: 8.51

Matched TTPs:

T1588.006 - Vulnerabilities
T1591 - Gather Victim Org Information
T1070.004 - File Deletion

MITREへのリンク →

Storm-0501

Score: 8.69

Matched TTPs:

T1588.006 - Vulnerabilities
T1036.004 - Masquerade Task or Service
T1218.010 - Regsvr32

MITREへのリンク →

UNC3886

Score: 7.61

Matched TTPs:

T1681 - Search Threat Vendor Data
T1036.004 - Masquerade Task or Service
T1070.004 - File Deletion

MITREへのリンク →

Contagious Interview

Score: 5.51

Matched TTPs:

T1681 - Search Threat Vendor Data
T1070.004 - File Deletion

MITREへのリンク →

APT29

Score: 5.23

Matched TTPs:

T1550.003 - Pass the Ticket
T1070.004 - File Deletion

MITREへのリンク →

APT32

Score: 10.07

Matched TTPs:

T1550.003 - Pass the Ticket
T1036.004 - Masquerade Task or Service
T1218.010 - Regsvr32
T1070.004 - File Deletion

MITREへのリンク →

BRONZE BUTLER

Score: 5.23

Matched TTPs:

T1550.003 - Pass the Ticket
T1070.004 - File Deletion

MITREへのリンク →

Aquatic Panda

Score: 3.48

Matched TTPs:

T1036.004 - Masquerade Task or Service
T1070.004 - File Deletion

MITREへのリンク →

Kimsuky

Score: 13.64

Matched TTPs:

T1036.004 - Masquerade Task or Service
T1591 - Gather Victim Org Information
T1218.010 - Regsvr32
T1070.004 - File Deletion
T1588.005 - Exploits

MITREへのリンク →

FIN7

Score: 5.38

Matched TTPs:

T1036.004 - Masquerade Task or Service
T1591 - Gather Victim Org Information

MITREへのリンク →

Wizard Spider

Score: 7.61

Matched TTPs:

T1036.004 - Masquerade Task or Service
T1552.006 - Group Policy Preferences
T1070.004 - File Deletion

MITREへのリンク →

FIN6

Score: 6.22

Matched TTPs:

T1036.004 - Masquerade Task or Service
T1573.002 - Asymmetric Cryptography
T1070.004 - File Deletion

MITREへのリンク →

Magic Hound

Score: 3.48

Matched TTPs:

T1036.004 - Masquerade Task or Service
T1070.004 - File Deletion

MITREへのリンク →

Lazarus Group

Score: 6.76

Matched TTPs:

T1036.004 - Masquerade Task or Service
T1591 - Gather Victim Org Information
T1070.004 - File Deletion

MITREへのリンク →

APT41

Score: 3.48

Matched TTPs:

T1036.004 - Masquerade Task or Service
T1070.004 - File Deletion

MITREへのリンク →

APT33

Score: 4.13

Matched TTPs:

T1552.006 - Group Policy Preferences

MITREへのリンク →

APT28

Score: 9.20

Matched TTPs:

T1591 - Gather Victim Org Information
T1070.004 - File Deletion
T1669 - Wi-Fi Networks

MITREへのリンク →

Moonstone Sleet

Score: 3.29

Matched TTPs:

T1591 - Gather Victim Org Information

MITREへのリンク →

Cobalt Group

Score: 6.87

Matched TTPs:

T1218.010 - Regsvr32
T1573.002 - Asymmetric Cryptography
T1070.004 - File Deletion

MITREへのリンク →

Tropic Trooper

Score: 4.13

Matched TTPs:

T1573.002 - Asymmetric Cryptography
T1070.004 - File Deletion

MITREへのリンク →

RedCurl

Score: 4.13

Matched TTPs:

T1573.002 - Asymmetric Cryptography
T1070.004 - File Deletion

MITREへのリンク →

Medusa Group

Score: 4.13

Matched TTPs:

T1573.002 - Asymmetric Cryptography
T1070.004 - File Deletion

MITREへのリンク →

OilRig

Score: 4.13

Matched TTPs:

T1573.002 - Asymmetric Cryptography
T1070.004 - File Deletion

MITREへのリンク →

FIN8

Score: 4.13

Matched TTPs:

T1573.002 - Asymmetric Cryptography
T1070.004 - File Deletion

MITREへのリンク →

このPulseに関連する脅威アクター (推論ベース)

Kimsuky

Score: 0.82

Matched TTPs:

T1036.004 - Masquerade Task or Service
T1591 - Gather Victim Org Information
T1588.005 - Exploits
T1070.004 - File Deletion
T1218.010 - Regsvr32

MITREへのリンク →

APT32

Score: 0.68

Matched TTPs:

T1070.004 - File Deletion
T1036.004 - Masquerade Task or Service
T1550.003 - Pass the Ticket
T1218.010 - Regsvr32

MITREへのリンク →

APT28

Score: 0.63

Matched TTPs:

T1070.004 - File Deletion
T1591 - Gather Victim Org Information
T1669 - Wi-Fi Networks

MITREへのリンク →

Sandworm Team

Score: 0.62

Matched TTPs:

T1070.004 - File Deletion
T1491.002 - External Defacement
T1588.006 - Vulnerabilities

MITREへのリンク →

Ember Bear

Score: 0.61

Matched TTPs:

T1070.004 - File Deletion
T1491.002 - External Defacement
T1588.005 - Exploits

MITREへのリンク →

Storm-0501

Score: 0.58

Matched TTPs:

T1036.004 - Masquerade Task or Service
T1218.010 - Regsvr32
T1588.006 - Vulnerabilities

MITREへのリンク →

Volt Typhoon

Score: 0.56

Matched TTPs:

T1070.004 - File Deletion
T1591 - Gather Victim Org Information
T1588.006 - Vulnerabilities

MITREへのリンク →

Related CVEs

Pulse – 脅威アクターグラフ

← Pulse一覧に戻る