12345

2/23/2011

Phishings on online transactions

1. Introduction

Recently, we found pop-up type phishing case on accessing certain web site; therefore, general users need to be careful on using internet.
Damage cases occurred on ticketing movie ticket using credit card or online banking in South Korea.
Because it can cause financial damage, general users must be careful on using financial related tasks.

2. Spreading path and symptoms of infection

It can be downloaded from attachment of e-mail or clicking link on messenger or SNS.
Besides, we found this malicious file has been being loaded running process list on victim's PC.


In this figure, we can check that "noloadf5A.dll" is injected in normal process "rundll32.exe". This dll file remains as a hidden on following path. Furthermore, infected PC can register following certain registry value.


* File path of noloadf5A.dll

C:\WINDOWS\system32\noloadf5A.dll ( 614,400 bytes, hidden )

* Registry value

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemonTool"="C:\WINDOWS\system32\noloadf5A.dll"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemonTool"="C:\Documents and Settings\(User account)\noloadf5A.dll".

These 2 types of tried cases have been found recently, and various cases can appear.

A. Tried case on signing in online banking site

Following figure can appear while signing in domestic online banking site in infected PC.

It induces user input card information. Besides, this page will appear only in "Internet Explorer".

B. Tried case on ticketing movie tickets online site

Another case appears on reserving tickets on movie tickets online site. If you input information for the ticket,


This Mastercard's secure code input form will appear.
This page is fake page and requires user card's information.


By the way, this pop-up will appear while using card for international-use.


3. How to prevent

To use PC safely from security threats of these malicious attachments, we recommend following "Security management tips" for general users.

Security management tips

1. Maintain the latest security update on OS and applications
2. Use anti-virus SW from believable security company and keep updating the latest engine and using real time detecting function
3. Do not see and download attached file from suspicious e-mail.
4. Keep caution to link from instant messenger and SNS.
5. Execute downloaded file after scan with anti-virus SW.

INCA Internet (Security Response Center / Emergency Response Team) provides diagnosis/treatment function with nProtect Anti-Virus/Spyware for detecting such as malicious file stated above and runs responding system against various security threats.

51 comments:

  1. Replies
    1. If you examine this blog post you will find all the information that you need to write an amazing essay and overcome writers block. Good luck


      ماکان باند

      محسن ابراهیم زاده

      Delete
  2. Aspiring to wind up noticeably an astonishing web journal author like the essayist of this blog.
    www.bokepsemi69.com

    ReplyDelete
  3. Reading something so beautiful has a healing power for the soul.
    http://www.intaskrnd.com/clash-royale-astuces/

    ReplyDelete
  4. Online software and business software can help managers study all their departments simultaneously, checking ledgers and payrolls whilst keeping tracks of the employees bills and expenses in materials. israin solutions

    ReplyDelete
  5. A getting a handle on splendidly formed blog. Truly a present for its social affair of individuals.
    jio gigafiber

    ReplyDelete
  6. A luxurious blog, truth be told. Appreciated every tiny bit of this amazing thing.
    Changelly

    ReplyDelete
  7. Properly, permit's just say I Biogenic Xr failed to need to request money back! i was completely satisfied with the outcomes I were given from taking Extagen and i am surely glad that I determined to present it a attempt.
    http://www.healthprograme.com/biogenic-xr-reviews/

    ReplyDelete
  8. Cla Safflower Oil For example, how frequently have you seen a stomach practice thingy on information business TV and stated, "Amazing!" But the reality of the situation is - no one is EVER going to see your washboard stomach under all your fat...
    http://www.drozhealthblog.com/cla-safflower-oil/

    ReplyDelete
  9. Testo Ultra Despite the fact that home grown cures are extraordinary male enhancers, don't put every one of your expectations in them.
    http://xtrfact.com/testo-ultra-reviews/

    ReplyDelete
  10. Testro T3 which for the ones folks who are devoted to the idea of complete body health and most advantageous wellness, is remarkable vital as nicely!
    http://www.drozhealthblog.com/testro-t3-uk/

    ReplyDelete
  11. Testx Core And considerably more. The majority of these utilization your turn keeping in mind the end goal to be performed.
    http://www.usadrugguide.com/testx-core-review/

    ReplyDelete
  12. CLA Safflower Oil sufficient water on your frame correctly metabolizes stores of fat. in any other case, if you're no longer having enough water supply (in your frame), your fat metabolism slows down, making it tough to burn calories.
    http://xtrfact.com/cla-safflower-oil/

    ReplyDelete
  13. Dermagen IQ for UK At least eight hours of Dermagen IQ sleep will assist along with your skin care. A lovely glow may be visible for your skin in case you're able to observe the eight-hour sleep that is advocated for anybody.
    http://www.usadrugguide.com/dermagen-iq/

    ReplyDelete
  14. Cla safflower oil The approach is to set sensible, achievable objectives and continuously scale things up. For instance, you could begin by supplanting your unhealthy breakfast supper with something more advantageous.
    http://healthnbeautyfacts.com/cla-safflower-oil-reviews/

    ReplyDelete
  15. Dermagen IQ This is an olive oil determined fixing utilized as an emulsifier (helps mix fixings that can't for the most part mix together) or to make a gel-like recipe.
    http://www.drozhealthblog.com/dermagen-iq/

    ReplyDelete
  16. Rapiture Muscle Builder Apparently sufficient, a bit bit of first-rate workout can ist mitigate all of these issues. with out a query, you will be surprised at how a whole lot advantage you'll get hold of from muscle constructing products Rapiture Muscle Builder.
    http://xtrfact.com/rapiture-muscle-builder/

    ReplyDelete
  17. In any case, what are the fixings behind these items to make Perlelux them viable in switching the early indications of maturing?
    http://www.drozhelp.com/perlelux/

    ReplyDelete
  18. D BAL Max Several days of light exercises is okay but any longer enthusiastic practicing will keep your body from recuperating .
    http://xtrfact.com/d-bal-max-review/

    ReplyDelete
  19. Slimfire Forskolin Subsequent to having a type of activity Is it ideal for you? No Forskolin one but you can genuinely answer that, once.
    http://supplementdigestdog.com/slimfire-forskolin/

    ReplyDelete
  20. Xtrfact Between a smoker and non-smoker person Ritesh non-smoker at 30 years old purchases an individual .
    http://xtrfact.com/

    ReplyDelete
  21. Pure CBD Oil The negative focuses are that it can be exceptionally dusty, a few steeds will eat straw informal lodging can bring .
    http://www.drozhealthblog.com/pure-cbd-oil/

    ReplyDelete
  22. CBD Hemp Oil Most natural and normal healthy skin items are hypo-allergenic. Albeit every normal item are your best healthy skin decision.
    http://xtrfact.com/cbd-hemp-oil/

    ReplyDelete
  23. Dermagen IQ Instead of recognized, you Dermagen IQ for UK will no doubt lament not dealing with your poor old skin There are numerous .
    http://www.drozhealthblog.com/dermagen-iq/

    ReplyDelete
  24. Perlelux That is the reason each one of those collagen creams and moisturizers have not been giving you the outcome you are searching for.
    http://www.usadrugguide.com/perlelux-ca/

    ReplyDelete
  25. Nitridex You can develop your masculinity as well. In this article, I will uncover all What makes normal improvement so extraordinary.
    http://supplementdigestdog.com/nitridex/

    ReplyDelete
  26. Zylix Plus The fuel that your body needs is made of basic supplements which kick begin the development procedure.
    http://www.drozhealthblog.com/zylix-plus/

    ReplyDelete
  27. Reducelan Advances glycogen stockpiling in the muscle, Reducelan and expands fat consuming in the muscle. The issue is the point at which you abstain from food
    http://supplementdigestdog.com/reducelant-garcinia/

    ReplyDelete
  28. For your security and prosperity, your must mastermind Nitridex to meet in an open place. Make sure to tell a companion where you will be.
    http://supplementdigestdog.com/nitridex/

    ReplyDelete
  29. This is a wonderful post.thanks for sharing <a href=" http://www.iam-active.com/monday-offer-fire-hd-8-essentials-bundle/”>news</a>

    ReplyDelete
  30. I havent any word to appreciate this post.....Really i am impressed from this post....the person who create this post it was a great human..thanks for shared this with us. Car Racing Simulator

    ReplyDelete

  31. Very Nice Article.! Thanks for sharing this amazing information ..

    https://freeadvertisingwebsite/

    ReplyDelete
  32. This comment has been removed by the author.

    ReplyDelete
  33. It ended up being Very useful to me and I am certain to every one of the reporters here!
    Content Management Development

    ReplyDelete
  34. Keto Fit Supplement to convince you that their method is the perfect option to a leaner physique. If reducing your weight is one of your goals this year, the first thing that you must set your mind to is this:LOSING Fat IS A COMPLETE LIFESTYLE CHANGE. THIS IMPLIES IT REQUIRES TIME, EFFORT, DISCIPLINE

    Keto Fit Reviews , & MOST OF MOST MENTAL CONDITIONING.If you are not ready to abandon your old ways mentally, and you'll prefer a less strenuous way to achieve your bodyweight goals, then you can certainly expect to relapse back again to old ways at any time your resolve
    http://healthcarebloggs.blogspot.com/2018/09/keto-fit-supplement.html
    https://supplementwarriors.tumblr.com/post/178035760812/keto-fit-reviews

    ReplyDelete
  35. Keto Fit Diet wavers or you find something more important to focus on. Extreme fad diets, surgeries and diet pills shall only job for a short while, if they just work at all. But when you have the wrong mind-set, eventually you are certain to return to your old habits and shape.

    Keto Fit Reviews
    To maintain you from falling into the trap of bogus weight loss experts, here are some of their claims and the true truth behind their method.1 . "Lose fat without watching your daily diet and keeping up a good work out routine. "Weight loss shall only be achieved
    https://revolutionizedgg.tumblr.com/post/178035988180/keto-fit-diet
    https://healthfitnessblogss.weebly.com/fitness-blog/keto-fit-reviews

    ReplyDelete
  36. A luxurious blog, truth be told. Appreciated every tiny bit of this amazing thing.
    usedcarunder10000

    ReplyDelete
  37. Team building can be sought after through an assortment of exercises, extending from the straightforward and essential, for example, one off holding practices previously or amid gatherings, to complex, multi-day reproductions, trainings or withdraws precisely sorted out by expert affiliations or organizations represent considerable authority in such projects. team building

    ReplyDelete

  38. keto slim powder reviews It is estimated that in the U.S alone, about 38.7% of all adults and about 17% of individuals under 18 are obese. keto slim plus
    https://www.smore.com/39qfa-keto-slim-reviews-how-does-it-work

    ReplyDelete
  39. The vast experience we have in offering purchase research paper services has enabled scores of students to score high grades in their assignment since we are known for offering the best professional writing services .

    ReplyDelete
  40. A motivating discussion is worth comment. I do think that you ought to write more about this subject matter, it might not be a taboo matter but generally people do not talk about these subjects. To the next! Cheers!!

    ReplyDelete
  41. This excellent website truly has all of the info I wanted concerning this subject and didn’t know who to ask. instacart promo code free shipping

    ReplyDelete
  42. You need to discover how to get loan modification help when you need it, so you can finally make that frantic feeling go away for good. Working capital loans

    ReplyDelete
  43. I havent any word to appreciate this post..... Really i am impressed from this post

    ReplyDelete
  44. Are You In A Dilemma On How To Choose The Best Monitor Under 10k In India? Well Then, You Have Just Spotted The Right Website And Article Best Monitor Under 10000

    ReplyDelete