12345

12/22/2011

[Warning] Malicious file masqueraded as a picture of Kim Jong Il's sister

1. Information

 
December 21, 2011, INCA Internet's Emergency Response Team detected malicious file related Kim Jong Il's death.
Due to the time difference, our team is fortifying our emergency monitoring for overseas spreading.
In the midst of this atmosphere, we detected malicious file disguised as his sister(Kim Kyung Hee)'s picture.
Therefore, users need to be careful on using internet.



This malicious file is also showing Kim Kyung Hee picture, and it installs additional malicious file secretly. With the death of Kim Jong Il, various types of malicious files is continuously emerging.

INCA Internet Security Response Center's Emergency Response Team has detected various variants, and based on our analysis, attackers seemed to try to bypass against Anti-Virus Software.

Not only the picture of her, we found another malicious file disguised as a PDF file with the death of Kim Jong Il on December 22, 2011.


The biggest feature of this case is using social engineering and social psychology. If infected by this kind of malicious file, victim's PC can be controlled by attacker.

[Warning] Additional malicious file disguised as the pic of Kim Jong Il (Update #1)
http://en-erteam.nprotect.com/2011/12/warning-additional-malicious-file.html

[Warning] Kim Jong Il Malicious scam is spreading(Update #3)
http://en-erteam.nprotect.com/2011/12/warning-kim-jong-il-malicious-scam-is.html

[Caution]Malicious file is spreading via a Korean entertainer's porn video file.
http://en-erteam.nprotect.com/2011/12/cautionmalicious-file-is-spreading-via.html

With continuous appearances of Kim and his family related malicious files, general users need to be careful not to be seduced about those files including phishing, attachment of e-mail, unofficial news, suspicious link, or Shorten SNS URL.


It was on December 20, 2011.

Especially, be careful on attachments such as PDF, DOC, HWP, PPT, ZIP, EXE, or SCR.

2. Malicious file with a picture of Kim Kyung Hee

Our team detected additional another malicious file disguised as Kim Jong Il's sister on our monitoring.
When this malicious file "Kim Kyung-hee.scr" is executed, it will create Kim Kyung-hee.jpg and msrt.exe on Temp folder and will execute.


msrt.exe is self-extractable RAR file, which will extract wship6.tmp, server.exe on Local Settings folder. And it will change server.exe to chksrv.exe.


As user just can see the following image, victim can't notice of being infected.


3. How to prevent

To use PC safely from security threats of these malicious attachments, we recommend you download latest security updates and obey following "Security management tips" for general users.

Security management tips

1. Maintain the latest security update on OS and applications
2. Use anti-virus SW from believable security company and keep updating the latest engine and using real time detecting function
3. Do not see and download attached file from suspicious e-mail.
4. Keep caution to link from instant messenger and SNS.

INCA Internet (Security Response Center / Emergency Response Team) runs responding system against various security threats.

36 comments:

  1. I think I will try this guide soon. I want to save my PC and prevent these problems.

    ReplyDelete
  2. APK Uncle is your best download answer for Android Apps and Mobile Software. Peruse the most recent news about Technology, Android APKs, and Gadget News just on apkuncle.com
    https://apkuncle.com//
    https://apkuncle.com/blackmart-alpha-apk/
    https://apkuncle.com/whatsapp-plus-apk/
    https://apkuncle.com/tiktok-apk/
    https://apkuncle.com/gbwhatsapp-apk/

    ReplyDelete

  3. Download Updated versions of all types of Apks like App store APKs, Messaging APKs, Popular APKs, Software APKs, and Streaming APKs from Apkmist.
    Apkmist Download
    WhatsApp Plus APK Download
    YOWhatsApp APK Download
    WhatsApp Business APK Download
    GBWhatsApp APK Download
    OGWhatsApp APK Download
    FMWhatsApp APK Download

    ReplyDelete
  4. If you are in search of best writers team those who take complete responsibility of your assignment help needs. All you need to do only is to reach out to our IdealAssignmentHelp. Here you will get all types of academic writing service experts and avail the best of assistance at affordable prices. Our professional writer experts are available every minutes to help you with whole assistance related to your educational and My Assignment Help! Scroll now for more details!

    ReplyDelete
  5. This comment has been removed by the author.

    ReplyDelete
  6. Thanks for sharing the article. It is really valuable Information and I am impressed by your article. Keep doing such great work.
    Visit : marriage delay mantra | divorce problem solution astrologer

    ReplyDelete
  7. It's nice to see your writing, which is exactly what I need, it's very detailed

    ReplyDelete
  8. There are many theology & religion coursework writing services and Religious Research Writing Services to choose from for those stuck with their religion assignment writing services and theology essay writing help services.

    ReplyDelete
  9. Public relations research writing services are very difficult to complete and many students are always searching for Public Relations Writing Services to help them complete their public relations coursework services and public relations research writing services.

    ReplyDelete
  10. This is really very interesting . I have got this warning of malicious file a few time ago and I was very afraid of formatting my system and I then forget to do the assignment help which was the important thing to do at that time.. Well, everything is normal now under assignment help Sydney as well as very admiring Assignment Help Brisbane at afforsdbale price.s

    ReplyDelete
  11. Wales publications are well-known publishing solution providers in various disciplines in the UK, Wales Publications serving to scientific organizations worldwide. Contact us for further information and know our best services and deals to achieve your goal.The fast submission process includes rapid publication research in UK that includes unique rapid process, inhouse peer review and 100% acceptance guarantee.

    ReplyDelete
  12. If you found any minor or major issue in Quickbooks software, you can download QB Tool which is the combination of all essential tools in single application. Rather than download individual tool, you can use this tool to save your time.
    Quickbooks tools hub

    ReplyDelete
  13. This comment has been removed by the author.

    ReplyDelete
  14. Many college and university students in the USA and UK are looking for top and essay helper free. We offer the preeminent academic writing company for pupils who want to surpass in their educational career. We are well-appointed with specialized experts who will write remarkable academic projects for you which will give you certain approvals from your tutors. We will always supply your essay assignments on time. We have 24/7 customer assistance that will benefit you anytime you requirement help.

    ReplyDelete
  15. Very interesting post. I am visiting this site for the first time. I found so many interesting stuff in your blog especially on the comments side. Thank you for sharing this informative post.
    Once the QuickBooks user clicks the OK button on the error message window, the system displays “Could not print to printer. Check your printer selection. Printing may have been cancelled from another program”. With QuickBook Customer Service, you will be able to know QuickBooks error code 20 causing factors and its troubleshooting method.

    ReplyDelete