Latest Adobe Flash Zero-Day Bug Already Part of Angler and Nuclear Exploit Kits

The latest Adobe Flash zero-day exploit has found its place in some of the most popular exploit kits in the market. This zero-day bug, patched two weeks ago is already a part of kits like Angler and Nuclear.

According to the security researchers at Malwarebytes, a successful exploit could cause a system crash and allow hackers to control the affected system.

Adobe Flash Player has become the favorite target of the attackers and the latest exploits are being used in targeted attacks. From a long time, the security experts have been advising the people to either disable the Flash player or remove it completely.

The Flash zero-day flaw CVE-2015-7645 was patched by Adobe last month and if affects Adobe Flash Player up to 19.0.0.207.

“People that choose to keep it should always ensure they are running the latest version but also run an exploit mitigation tool in parallel to account for zero-days,” says Jerome Segura, senior security researcher at Malwarebytes.

Earlier it was revealed that in the recent Pawn Storm campaign, the latest zero-day exploits were used to attack the ministries of foreign affairs in many countries.

As these Flash zero-day bugs have found a place in the exploit kits, it won’t be wrong to expect that the Flash will now be exploited at a much faster pace.