Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

Flash Player vulnerability exploited

It’s probably smart to disable or remove your Flash player for at least the next few days. Malware don’t need coffee discovered an unpatched vulnerability (zero day attack) in Flash Player today that is being exploited by an attack tool called the Angler Exploit Kit. This attack could potentially harm many computers because it targets everyone who visits a website that contains malicious code and who’s security software doesn’t block the malware. - See more at: http://blog.emsisoft.com/2015/01/22/zero...U2DfR.dpuf
Update MBAE does block it https://blog.malwarebytes.org/exploits-2...-the-wild/
[Image: T2TtNNn.png]
Thanks for the heads up, i will disable flash on my parallels desktop!
Not trying to be cocky but i love my mac.
Sorry if you disagree with me.
Thanks for the warning, Disabled with <3
sighs
This is why people hope MBAE would help.

Thanks for the share, hope this is fixed soon.
(Jan 21, 2015 06:45 PM)Ghanem Wrote:  *sighs*
This is why people hope MBAE would help.

Thanks for the share, hope this is fixed soon.

MBAE will not work against a 0 day until it patched
[Image: T2TtNNn.png]
(Jan 21, 2015 06:45 PM)Ghanem Wrote:  *sighs*
This is why people hope MBAE would help.

Thanks for the share, hope this is fixed soon.

MBAE stops these types of attacks with pretty impressive accuracy.
(Jan 21, 2015 09:39 PM)Yani Wrote:  Actually it does. It doesn't only check for signatures but also checks if something got executed trough the guarded processes, like cmd.exe for example. So this could in fact stop 0 days.

It still depends on how the exploit works though, as it can use different methods.

This. MBAE is designed to stop zero-days and uses heuristics and virtualization of browser plugins, as well as the browser itself. Rest assured exploits such as these won't stand a chance making it through.
I was about to go remove my flash until I noticed I don't even have flash, HTML 5 has replaced my need for flash.
(Jan 21, 2015 09:39 PM)Yani Wrote:  It doesn't only check for signatures

As far as I understood, it doesn't check for signatures at all.
Hence it's so small, it does exactly what you said and check a program's behavior.

But still, none of you has a flash 0Day to test MBAE out I guess.
So nobody knows if it'd actually work.
Thanks for the heads up. 🤝

I will be disabling flash for awhile.
[Image: Cg4ZWf2.png]
Now it is actually tested I can say that it does block it https://blog.malwarebytes.org/exploits-2...-the-wild/ before it is hit or miss with a 0 day.
[Image: T2TtNNn.png]
Hail MBAE then.
This is one of the best protection software I met.


Possibly Related Threads...
Thread / Author Replies Views Last Post
by loothsurbMar 5, 2019 03:11 PM 0 165 Mar 5, 2019 03:11 PM
Last Post: loothsurb
by Zar66661Oct 18, 2017 11:00 AM 1 148 Oct 18, 2017 11:00 AM
Last Post: 5chn4pp
by NoScriptMar 14, 2015 03:44 PM 3 309 Mar 14, 2015 03:44 PM
Last Post: He B TeMy