Watering Hole Attack on Aerospace Firm Exploits CVE-2015-5122 to Install IsSpace Backdoor - Palo Alto Networks BlogPalo Alto Networks Blog

This report documents a watering hole attack against an aerospace firm that used a CVE-2015-5122 Flash exploit to drop and execute IsSpace backdoor, detailing shellcode, payloads, C2 infrastructure, and potential links to the NFlog family and Southeast Asia threat actors.