Armorize Technologies Blog: Newest Adobe flash 0-day used in new drive-by download variation: drive-by cache, targets human rights website

(Credits: Chris Hsiao, NightCola Lin, Wayne Huang) Armorize runs one of the world's largest cloud-based Web malware scanning service, OEM'd to large security and hosting companies. Recently, we've noticed increasing use of a variation of the drive-by download attack, coupled usually with 0-days. This is our technical report on the subject. We realize in recent years, "interesting" threat names hav

[kaito834]

2011年4月に修正された Adobe Flash Player の脆弱性（CVE-2011-0611）を悪用する drive-by download 攻撃に関するブログ記事。実行するマルウェアを Exploit 実行前にキャッシュさせる方法（drive-by cacheと呼称）が確認された。

[efcl]

Flashの0day使った攻撃手法の例。ダウンロードから実行までの手順解説,swfはデコンパイルしたもの