Posts Tagged ‘korean banks’

South Korean Wipers and Spear Phishing E-mails

Mar

2013

News broke last week of a “wiper” malware that affected South Korean banks and broadcasting companies. NSHC Red Alert Team has published a detailed analysis of the malware here. There were several hashes mentioned for the same component, which suggest multiple operations under the same campaign. So how did the affected companies get infected? No […]

Category General Written by F-Secure Antivirus Research Weblog 0 Comments

South Korean Banks, Media Companies Targeted by Destructive Malware

Mar

2013

A massive computer shutdown of two South Korean banks and media companies occurred Wednesday via an Internet malware attack. The malware wiped out the master boot records on the hard drives of the infected computers, overwriting the MBR with either one of these strings: PRINCPES PR!NCPES HASTATI. Figure 1: Snapshot of MBR after infection.The attack […]

Category General Written by Blog Central > McAfee Labs 0 Comments

Remote Linux Wiper Found in South Korean Cyber Attack

Mar

2013

Earlier today we published our initial findings about the attacks on South Korean banks and local broadcasting organizations. We have now discovered an additional component used in this attack that is capable of wiping Linux machines. Figure 1. Bash wiper script targeting remote Linux machines The dropper for Trojan.Jokra contains a module for wiping remote Linux […]

Category General Written by Symantec Security Response Blog 0 Comments

The Latest in IT Security

Posts Tagged ‘korean banks’

South Korean Banks, Media Companies Targeted by Destructive Malware

Remote Linux Wiper Found in South Korean Cyber Attack

Categories

Featured

Archives

Latest Comments

About Us

Contact Us