Trusted Design

Latest Flash Exploit Used in Pawn Storm

概要

Our analysis of the Adobe Flash zero-day vulnerability used in the latest Pawn Storm campaign reveals that the previous mitigation techniques introduced by Adobe were not enough to secure the platform. Used in Pawn Storm to target certain foreign affairs ministries, the vulnerability identified as CVE-2015-7645 represents a significant change in tactics from previous exploits. It is important to note that Adobe has released the bulletin APSB15-27 to address this vulnerability; the latest version of Flash (19.0.0.226) is no longer vulnerable.

Created: 2026-02-23

Indicators

• CVE - CVE-2015-7645 -
• FileHash-SHA1 - 2df498f32d8bad89d0d6d30275c19127763d5568 -
• FileHash-SHA1 - a5fca59a2fae0a12512336ca1b78f857afc06445 -
• FileHash-SHA1 - 20f5a9c0e1d2aef36d15ca149fe71ac6b2a9af1e -

類似Pulses

• Angler, Nuclear Exploit Kits Integrate Pawn Storm Flash Exploit (score: 0.81)
• Killing a Zero-Day in the Egg: Adobe CVE-2016-1019 (score: 0.76)
• Security Advisory for Adobe Flash Player (score: 0.76)
• Magnitude Exploit Kit Uses Newly Patched Adobe Vulnerability (score: 0.74)
• CVE-2015-5122 Exploited in Strategic Web Compromise (score: 0.73)

このPulseに関連する脅威アクター (事実ベース)

このPulseに関連する脅威アクター (推論ベース)

Related CVEs

Pulse – 脅威アクター グラフ

---

← Pulse一覧に戻る