Microsoft discovered two distinct APT groups, PROMETHIUM and NEODYMIUM, that exploited the same Flash Player zero-day flaw on same targets. Both groups exploited the flaw before its public disclosure and against the same type of targets. Microsoft observed that the attacker used a specific strain of malware dubbed Truvasys that was designed to compromise target devices with Turkish locale settings. The flaw was patched by Adobe on May 12, but according to the experts from the firm Recorded Future published a report on the most common vulnerabilities used by threat actors in exploit kits.”]
Source: https://securityaffairs.co/wordpress/54451/apt/promethium-neodymium-apts.html