[2016-04-08] Recent Adobe Flash Vulnerability Helped Spread Bitcoin Ransomware

[jdebunt]

What are your thoughts on the Flash vulnerability being partially responsible for Bitcoin ransomware distribution?

Proofpoint, a security research company, has found evidence this particular Flash exploit has been used to deploy bitcoin ransomware around the world. More specifically, both Locky and Cerber ransomware strains have found their way to computers because of this vulnerability, as it is part of the Magnitude exploit kit.

http://bitcoinist.net/recent-adobe-flash-vulnerability-helped-spread-bitcoin-ransomware/

[spirra]

This is not the first time that hackers use Adobe Flash do distribute different malware (http://manual-removal.com/cerber/) ;(

[Kprawn]

This is not the first time that hackers use Adobe Flash do distribute different malware ;(

Very true, and to make things worst... many sites and services cannot be accessed without these add-on being updated. Most people upgrade to these flash players and they do not even know how

vulnerable their computers are. I avoid Adobe like the plaque for this very reason and would much rather go without these services being offered with Adobe flash requirements. I sometimes wonder if

Adobe is quietly working with some governments to inject backdoors with their proprietary code to spy on people. 

[spirra]

This is not the first time that hackers use Adobe Flash do distribute different malware ;(

Very true, and to make things worst... many sites and services cannot be accessed without these add-on being updated. Most people upgrade to these flash players and they do not even know how

vulnerable their computers are. I avoid Adobe like the plaque for this very reason and would much rather go without these services being offered with Adobe flash requirements. I sometimes wonder if

Adobe is quietly working with some governments to inject backdoors with their proprietary code to spy on people. 

Completely agree, nowadays Adobe Flash is one of a best storehouse of Zero-days for hackers and maybe governments as you say. I don't think that such a big and respectable company like Adobe has  shitty-security experts.