0-days offered by Austrian agency used to hack Home windows customers, Microsoft says

Microsoft stated on Wednesday that an Austria-based firm named DSIRF used a number of Home windows and Adobe Reader zero-days to hack organizations positioned in Europe and Central America.

A number of information shops have printed articles like this one, which cited marketing materials and different proof linking DSIRF to Subzero, a malicious toolset for “automated exfiltration of delicate/non-public knowledge” and “tailor-made entry operations [including] identification, monitoring and infiltration of threats.”

Members of the Microsoft Menace Intelligence Middle, or MSTIC, stated they’ve discovered Subzero malware infections unfold via a wide range of strategies, together with the exploitation of what on the time have been Home windows and Adobe Reader zero-days, that means the attackers knew of the vulnerabilities earlier than Microsoft and Adobe did. Targets of the assaults noticed up to now embody legislation companies, banks, and strategic consultancies in nations similar to Austria, the UK, and Panama, though these aren’t essentially the nations wherein the DSIRF prospects who paid for the assault resided.