{"id":558,"date":"2015-08-10T17:39:41","date_gmt":"2015-08-10T15:39:41","guid":{"rendered":"https:\/\/dev.sicherheitsforum.ch\/?p=558"},"modified":"2023-03-14T08:57:35","modified_gmt":"2023-03-14T07:57:35","slug":"darkhotel-greift-wieder-an","status":null,"type":"post","link":"https:\/\/news.save.ch\/en\/darkhotel-greift-wieder-an\/","title":{"rendered":"\"Darkhotel\" attacks again"},"content":{"rendered":"
\"Figure:
Figure: Kaspersky<\/figcaption><\/figure>\n

The exploits target vulnerabilities in Adobe Flash Player and Windows. At least one of these exploits is being used by the powerful Darkhotel group, which is again using it to increasingly attack executives, mostly in hotels.<\/p>\n

This is not the first time \"Darkhotel\" has used zero-day vulnerabilities. Kaspersky Lab believes that the cyber espionage group has deployed a good half-dozen zero-day exploits in recent years, primarily targeting Adobe Flash Player. To procure them, \"Darkhotel\" has apparently invested considerable sums of money. With the current wave of attacks in 2015, the group expanded its reach around the world, carrying out targeted spearphishing attacks on victims from Germany as well as North and South Korea, Russia, Japan, Bangladesh, Thailand, India, and Mozambique.<\/p>\n

Involuntary help<\/strong><\/p>\n

The Darkhotel group, which specializes in APT (advanced persistent threats) attacks, has been active for almost eight years. Their methods include the use of social engineering techniques, stolen security certificates and compromising WLAN networks in hotels. What is new now is the use of zero-day exploits from Hacking Team's inventory. Here is an overview of the methods:<\/p>\n