Researchers at Morphisec have uncovered a watering hole attack on leading Hong Kong Telecom website exploiting the CVE-2018-4878 flash vulnerability. Adobe rolled out an emergency patch that fixed two critical remote execution vulnerabilities in February. North Koreas APT group was spotted exploiting the vulnerability in targeted attacks. The company hasnt attributed the attack to a specific threat actor, it is still investigating the incident. The attack is of advanced evasive nature and suggests that a very advanced group is behind it.”]
Source: https://securityaffairs.co/wordpress/70691/hacking/watering-hole-cve-2018-4878.html