DealersChoice

Sednit RTF EK - Status: Active

References:

'DealersChoice' is Sofacy's Flash Player Exploit Platform - 2016-10-17 - PaloAlto - Robert Falcone - Bryan Lee DealersChoice APT28

Pawn Storm Ramps Up Spear-phishing Before Zero-Days Get Patched - 2016-11-09 - Trend Micro - Feike Hacquebord - Stephen Hilt DealersChoice Sedkit Sednit CVE-2016-7855 CVE-2016-7255 APT28

More Reading:

APT28 racing to exploit CVE-2017-11292 Flash vulnerability before patches are deployed - 2017-10-19 - Proofpoint - Kafeine - Pierre T CVE-2017-11292 DealersChoice