Microsoft says Russia-linked Fancy Bear hackers are exploiting Windows zero-day flaws

Microsoft has identified a Russia-linked hacker group’s involvement in the zero-day attacks. The hacker group Strontium, which is also known as APT28 and Fancy Bear among others, is the same entity believed to be responsible for the controversial DNC (Democratic National Committee) hack. Microsoft said that Strontium was conducting “low-volume” spear phishing campaigns to target Windows users.

The company revealed that the hacker group leveraged two zero-day vulnerabilities, which were recently exposed by Google, in Adobe Flash and down-level Windows kernel to “target a specific set of customers”. Microsoft, however, refrained from mentioning the identities of the victims targeted by the attack.

A zero-day vulnerability is a publicly disclosed security flaw that was not known before and for which the software maker is yet to release a patch. For the full article click here 

from hacker samurai http://ift.tt/2fawaIZ
via IFTTT