# MA-467.042015: MyCERT Advisory - MyCERT Vulnerability and Threat Summary - March 2015

**Date:** 07 Apr 2015  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-467.042015  
**Advisory ID:** MA-467.042015

---

**1.0     Introduction**
The MyCERT Vulnerability and Threat Summary contains list of Alert and Advisory that had been produced in March. It provides a summary of new vulnerabilities and current threats that have been observed by MyCERT in each month  which had been produced as MyCERT Alert and Advisory.
The MyCERT Vulnerability and Threat Summary will be very beneficial for System Administrators and Incident Response Teams as a reference on security 
**2.0    List of Advisory and Alert**
MyCERT has released four advisories and four alerts for the month of March 2015.  This is to address multiple vulnerabilities that affecting a few products and softwares.  Users and administrators are encouraged to review and apply the necessary updates.
2.1 [SSL/TLS Vulnerability Allow Remote SSL Servers to Conduct RSA to EXPORT\_RSA Downgrade Attacks](https://www.mycert.org.my/portal/advisory?id=MA-457.032015)
This alert highlights about the SSL/TLS vulnerability that allows attackers to force many devices, including iOS and Android devices to downgrade their encrypted connections to use weaker cryptographic keys.
2.2 [Adobe Releases Security Updates for Flash Player](https://www.mycert.org.my/portal/advisory?id=MA-458.032015)
This advisory highlights about vulnerabilities in Flash Player, one of which could potentially allow an attacker to take control of the affected system. Users need to review Adobe Security Bulletin APSB15-05.
2.3 [Drupal Releases Security Updates](https://www.mycert.org.my/portal/advisory?id=MA-459.032015)
Drupal is a popular content management system that is free and open source. The Drupal Security Team released updates to address multiple vulnerabilities in Drupal 6 and 7. Users and administrators are strongly encouraged to apply necessary updates.
2.4 [Apple Releases Security Update for OS X Yosemite](https://www.mycert.org.my/portal/advisory?id=MA-460.032015)
This advisory highlights about the security updates for Apple OSX Yosemite. Exploitation of these vulnerabilities could potentially allow a remote attacker to take control of the affected system.
2.5 [Mozilla Releases Security Updates for Firefox, Firefox ESR and SeaMonkey](https://www.mycert.org.my/portal/advisory?id=MA-465.042015)
Mozilla Foundation has released security updates to address multiple vulnerabilities in Firefox, Firefox ESR and SeaMonkey. Mozilla encourages users and administrators to review Mozilla's Security Updates and apply the necessary updates.
2.6 [Dyre Banking Malware](https://www.mycert.org.my/portal/advisory?id=MA-462.032015)
MyCERT have received information from valid sources and made aware of malicious program called Dyre aka Dyreza that target online banking users, similar to Zeus/Citadel banking trojan. Dyre is part of a phishing campaign targeting online banking user using various method including senders, attachments and exploits. This campaign uses various techniques to force victim into opening the email attachment and downloading the malware.
2.7 [Installer Hijacking Vulnerability in Android Devices](https://www.mycert.org.my/portal/advisory?id=MA-463.032015)
A vulnerability in Google's Android OS has been discovered that could allow an attacker to change or replace a seemingly safe Android application with malware during installation. An attacker exploiting this vulnerability could access and steal user data on compromised devices without user knowledge.
2.8 [Cyber Blackmail Scam is on the Rise](https://www.mycert.org.my/portal/advisory?id=MA-464.032015)
Lately in this quarter, MyCERT had been observing an increase in number of cyber blackmail scam incidents from our constituency which involves blackmailing and extorting victims for money. In three months, more than 20 incidents of cyber blackmail scam had been reported to us and more users may fall into victims if proper mitigations are not in practise. Unsuspecting Malaysians continue to be victims, with some being threatened to have their nude photos or compromising videos released on Youtube and social networking sites if they do not pay up, within a certain period of time.
Generally, MyCERT advises the users of this software to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail: [[email protected]](/cdn-cgi/l/email-protection) or [[email protected]](/cdn-cgi/l/email-protection)
Phone: 1-300-88-2999 (monitored during business hours)
Fax : +603 89453442
Mobile: +60 19 2665850 (24x7 call incident reporting)
SMS : CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours : Mon - Fri 09:00 AM - 18:00 PM MYT
Web: [https://www.mycert.org.my](https://www.mycert.org.my/)
Twitter: <http://www.twitter.com/mycert>
Cyber999 Mobile Apps: [IOS Users](https://itunes.apple.com/my/app/cyber999-mobile-application/id888552400?mt=8&ign-mpt=uo%3D4) or [Android Users](https://play.google.com/store/apps/details?id=my.cyber999.mobile)
**3.0     References**
- MyCERT Advisories, Alerts and Summaries for the year 2015; <https://www.mycert.org.my/portal/advisories?id=431fab9c-d24c-4a27-ba93-e92edafdefa5&year=2015&ctype=&keyword=>