12345

12/26/2011

[Warning] Santa Claus is coming to down with scams.(Update #1)

1. Information

As a result of intensive monitoring during Christmas season, INCA Internet's Emergency Response Team detected various scams around the year.
Malicious hackers are trying to spread malicious files with using Christmas season and the end of the year.
Users need to be careful on using about "Christmas, video URL, season's greetng, SNS message, or shorten URL", especially on e-mail with attachment or URL.



Malicious file distributors are using social engineering and social issues for spreading malicious files.
Our team was fortifying our emergency monitoring during Christmas season, and we found many spreading cases.

[Information] Be careful about scams around the end of the year
http://en-erteam.nprotect.com/2011/12/information-be-careful-about-scams.html

Issues on 2011 and predictions of upcoming 2012
http://en-erteam.nprotect.com/2011/12/issues-on-2011-and-predictions-of.html

2. Malicious files related Christmas

During this Christmas, MS Word exploit, Christmas program, and PDF exploits have been reported.

* Case1 - THIS XMAS SAY NO TO MADE IN CHINA

This e-mail seemed to be related Tibet, and it contains attachment which name is "THIS XMAS SAY NO TO MADE IN CHINA.doc".
It is malicious and installs malicious file secretly.


This e-mail is expected to spread malicious files to multiple countries.
And the recipients are including Indian, Nepalese, Switzerland's, Japanese, Canadian, French, Russian; therefore, attacker seemed to attack Tibet related users.

If user executed attachment, it will create normal document file and shows to user, then it will create another malicious file and execute.
Let's see the document.


Those files including wordupgrade.exe will be created in Temp folder and executed, and it hides itself with using batch command.


Upon executed malicious "wordupgrade.exe", it will install additional malicious file disguised as internet service function, then "wordupgrade.exe" will be deleted itself by batch file command.

C:\Program Files\Online Services\Internet Services.exe


Executing "Internet Services.exe" will create other malicious files, which will also be deleted by its batch file command.


And then, it accesses to certain host and waits for additional commend. When remote control connection is established, Backdoor can work and victim's PC can be in danger.


* Case 2 - Malicious file disguised as Christmas decoration program

Christmas tree desktop program can be seen in right bottom of desktop.


This freeware can be downloaded on http://get-xmas.com/, malicious file distributor injected malicious code and repackaged.

Malicious file uses WinRAR SFX(Self-extracting), and it contains various malicious files including normal mas.exe.


Once executed, it will create "udp.exe, taskngr.exe, drv.cmd, mas.exe, spoolcv.exe, svghost.exe" on system folder, and it can update additional malicious file on accesses certain domain.




Especially, disguised as install_flash_player.exe is the biggest feature of this file, and it adopted WinRAR SFX as similar as the program above.


This malicious file can download additional malicious file disguised as flash player.

* Case 3 - Malicious file using PDF exploit

Merry Christmas.pdf uses Adobe Reader program's vulnerability and installs secretly.


When malicious PDF file is executed, it is disguised as a normal file with showing normal document.
And it installs malicious gupdater.exe on Application Data folder with using updates.js, Winword.js coded by Embedded JavaScript

3. How to prevent

Social engineering can be on users via e-mail or SNS. To use PC safely from security threats of these malicious attachments, we recommend you download latest security updates and obey following "Security management tips" for general users.

Security management tips

1. Maintain the latest security update on OS and applications
2. Use anti-virus SW from believable security company and keep updating the latest engine and using real time detecting function
3. Do not see and download attached file from suspicious e-mail.
4. Keep caution to link from instant messenger and SNS.

INCA Internet (Security Response Center / Emergency Response Team) runs responding system against various security threats.

89 comments:

  1. Replies
    1. شادترین و بهترین موزیک ها در سایت ما دانلود آهنگ جدید

      Delete
  2. Welcome to the Best writer Review, Here you can get the best All Assignment Help reviews sites. We strongly urge you to check our entire website once and we will assure you will find this review website very useful. Our hard work will be rewarded if students like you will appreciate our effort and spread the message about this site with your class-fellows and friends.

    ReplyDelete
  3. I feel it interesting, your post gave me a new perspective! I have read many other articles about the same topic, but your article convinced me! Thanks your share!

    ReplyDelete
  4. https://irantahsil.org/
    Thank you ever so for you article post.Really looking forward to read more.
    pls see my site

    ReplyDelete
  5. Thank you ever so for you article post.Really looking forward to read more.

    ReplyDelete
  6. Thank you for sharing your details and experience. I think it very good for me.bloons tower defense 5
    super smash flash 2

    ReplyDelete
  7. This comment has been removed by the author.

    ReplyDelete
  8. مؤسسة مكافحة حشرات بمحايل صعب مكافحة الحشرات بمحايل صعب و الشغل فى أبادتها نهائيا فشركتنا من المؤسسات المختصة و الرائدة الاولى فى ذلك الميدان
    شركة مكافحة النمل الابيض بالقطيف
    شركة مكافحة حشرات بالقطيف
    شركة رش مبيدات بالقطيف
    شركة الانوار لرش المبيدات

    ReplyDelete
  9. tutuapp has a champion among the best UIs which empowers customers to use it suitably. tutuapp apk download , if they face any issue, they may get the help of the application's help center to get help.

    ReplyDelete
  10. applock is a lightweight application that gives you a chance to bolt practically any sort of document on your Android.

    ReplyDelete
  11. نحن نعتبر من شركة تنظيف مجالس بخميس مشيط
    الاقوي في التعامل مع الأتربة
    شركة تنظيف سجاد بخميس مشيط
    وتلك الحشرات التي تجعلنا دائما
    شركة كشف تسربات المياه بالرياض
    في حالة الصرع المستمر
    شركة تنظيف شقق بخميس مشيط
    والدائم في التعامل مع كل العناصر الذي تم عندما يستخدم المكانس الكهربائيه و على ما جالك من المعدات و المنظفات
    شركة تنظيف منازل بخميس مشيط
    من أجل الحصول على السطح الجاف النظيفة التي
    شركة نقل عفش بخميس مشيط
    ترسم من استقبل القبله الأول في تلك الاعمال والانشطة
    ده كله ما علينا هو إثبات تلك المهام التي تجعلنا
    شركة عزل اسطح بخميس مشيط
    دائما الافضل والاسرع في كل تلك الأمور

    التخلص من الأتربة وخيوط العنكبوت
    من الاتربه ما يكون دائما في انتشار
    شركة رش مبيدات بخميس مشيط
    مستمره فى الموقع وهو ما يجعل كل الارضيات الجدران في المنازل وفي الفنادق في كل الأماكن والمواقع التي تحتاج التوظيف
    شركة عزل خزانات بخميس مشيط
    دا واجب علينا الي في شركه التعامل بكل الحكمة والمهارة من أجل التخلص من تلك الأتربة خيوط العنكبوت
    شركة كشف تسربات المياه بخميس مشيط التي تعتبر من الاشياء المناسبه لها دائما وفي ذلك نحن نستمر وانا اعمل من اجل رفع القدرة والكفاءة الخاصة بنا وإدراك الفاعلية والكفاءة في التنظيف
    الكفاءة في التنظيف

    ReplyDelete
  12. Helo is a content sharing platform to write and share WhatsApp Status, Shayari, Memes, Trending Jokes, Wallpapers and more with your friends.
    https://heloapp.xyz/
    helo app
    helo app Apk
    helo app download
    helo app download apk

    ReplyDelete
  13. From our custom research essay writing services, students can hire the best writers and be assured to receive the best custom papers when they search buy a custom research paper written by experts.

    ReplyDelete
  14. Thanks for providing apk flie for free

    shareits

    ReplyDelete
  15. Thanks for providing the smartphones features & specifications

    mytechmobiles

    ReplyDelete
  16. This comment has been removed by the author.

    ReplyDelete



  17. Excellent Blog! I would like to thank for the efforts you have made in writing this post. I am hoping the same best work from you in the future as well.
    I wanted to thank you for this websites! Thanks for sharing. Great websites!

    Blackmart APK https://apkfasak.com
    thoptv apk
    GBWhatsApp APK
    FMWhatsApp APK
    Ac Market APK
    TutuApp APK

    ReplyDelete


  18. Excellent Blog! I would like to thank for the efforts you have made in writing this post. I am hoping the same best work from you in the future as well.
    I wanted to thank you for this websites! Thanks for sharing. Great websites!

    Pubg APK Pubg Mobile APK
    Pubg
    Pubg Download
    Download Pubg Mobile
    Pubg Mobile Download

    ReplyDelete
  19. This comment has been removed by the author.

    ReplyDelete
  20. As much as an Affordable Term Papers is a summary of other works that should not be an excuse to many Pre Written Research Paper with plagiarized work. They ensure that the arguments are presented in a discussion and reflective manner to maintain the aspect of originality as well as show the audience that they understand what they are presenting on the Buy Pre Written Essays.

    ReplyDelete
  21. The Buy Pre Written Essays that clients receive from the firm are of impeccable quality that assures of impressive Buy Term Papers Online performance in academics and other Buy Pre Written Research Paper projects.

    ReplyDelete
  22. I simply must tell you that you have an excellent and unique post that I kind enjoyed reading. thank you for sharing with us. keep moving. GHD SPORTS APK
    GHD SPORTS
    gomax tv
    ghd sports

    ReplyDelete
  23. I am really loving the theme/design of your web site. Do you ever run into any browser compatibility problems? A few of my blog readers have complained about my website not working correctly in Explorer but looks great in Chrome. Do you have any tips to help fix this issue?how to download video from tubemate

    ReplyDelete
  24. I will carefully read the issues you just shared, I find there are some places that are not very clear

    ReplyDelete
  25. How about going to a regular public gym? What are the advantages this option presents as opposed to owning good home gym equipment? Initially, a person wouldn't have to invest a big amount on membership.

    https://gymfeature.com/quick-fitness-tips/

    ReplyDelete


  26. PSL streaming in India, UAE, UK, Canada, and USA is by far the widest stream Pakistan has done. This allows for the Pakistani fans around the world to enjoy their favorite event. Therefore, this promotes the positive image of Pakistan around the world. Officials understand that PSL live streaming 2020 is going to break past records on all digital platforms.Also there is some webstreams that can share their live streaming of pakistan super league that is Cichd live, Crictime, Mobilecric, tensports live and smartcric.

    ReplyDelete
  27. The greatest excitement is probably found among the relatively small circle of fly fishers who pursue them.
    how to tell if your betta fish is happy

    ReplyDelete
  28. https://livenettvapk.live
    Live NetTV APK for android will help you stream over 700 TV channels! Watch free TV online using Live TV App. Live Net TV application is ...

    ReplyDelete

  29. الرائد افضل شركة تنظيف و غسيل خزانات بالمدينة المنورة تنظيف خزانات بالمدينة المنورة وتقوم اياب تقيمها بالاشعه الفوق البنفسجية

    تنظيف خزانات

    ReplyDelete
  30. yowhatsapp 2020 As a MOD of the original app, it's a development based on its source code, but introducing different modifications.

    ReplyDelete
  31. Thanks for sharing, great post!

    Áo khoác Đà Lạt chuyên sỉ và lẻ áo khoác aokhoacdalat.com với giá ưu đãi nhất 2020. Luôn cập nhật mẫu mới chất lượng và dày ấm nhất kể cả với thời tiết lạnh giá các nước có du học sinh và xuất khẩu lao động. Aokhoacdalat.com được đồng hành cùng các bạn!!!!

    ReplyDelete

  32. If you are interested in marketing manager contact list or want database marketing. We also provide sales automation software and marketing automation services. If you are interested, then please contact us for detailed information.

    ReplyDelete
  33. I think it is a good idea, I have thought of it but not as detailed as you.

    ReplyDelete
  34. Medical coursework writing service seekers have been on the rise lately since most learners need Medical Research Paper Services, nursing research writing services and medical essay writing services.

    ReplyDelete
  35. Finding the best powerpoint presentation online services and PowerPoint Presentation Writing Services is not easy unless one is keen to establish a reputable powerpoint presentation assignment writing service provider & powerpoint presentation coursework writing services.

    ReplyDelete
  36. Bagi pemain judi poker online tentu bonus menjadi salah satu incaran, namun tidak semua agen dapat memberikannya. Adapun salah satu agen poker yang memberikan banyak keuntungan untuk anda adalah IDN Poker yang memberikan anda berbagai bonus bahkan di awalaN pendafataran salah satunya IDN Poker Bonus New Member 20 tanpa syarat

    ReplyDelete
  37. Wales publishers are offering optimized, Best Publication Services in UK to boost the researcher and research communities, by providing accelerated and efficient services to fasten the publishing process and to give more opportunities for research on different disciplines.Wales publication research conferences give the researchers an international platform to discuss their scientific research Open Access Publishing UK work and their edges.We are different from other conferences because the community's member organizes our conferences.

    ReplyDelete
  38. I Really Loved this post. This is very infomative Post. Keep updated More. Do you want to Buy Ahram? Ramadan Umrah Ahram in Pakistan
    with free shipping and cash on delivery

    ReplyDelete
  39. Bad Credit Payday Loans lenders aren’t indifferent to your financial problems and ready to provide you with maximum of pros. If choose cash loans online, you won’t find any cons at all as the online loans bad credit instant approval are completely customer-oriented.

    ReplyDelete
  40. در بعضی از صنایع در هنگام شروع به کار نیاز به آب صفر درجه یا یخ دارند که برای این منظور از دستگاهی به نام آیس بانک استفاده میکنند. آیس بانک برای جلوگیری از اتلاف وقت در شب به میزان موردنیاز روز آب صفر درجه یا یخ تولید می شود و در مخزن نگهداری می شود. نحوه عملکرد آیس بانک بدین گونه است که که در هنگام شب یا مواقعی که برق کمتری مصرف می شود شروع به فعالیت می کند. در این حالت با عبور گاز مبرد در کویل های اواپراتوری در اطراف کویل ها یخ به وجود می آید. هنگامی که سرمایش مورد نیاز افزایش یابد ، آب موجود در چیلر از آیس بانک عبور کرده و با برخورد با یخ دمای آن به شدت کاهش می یابد و سپس از مخزن خارج شده تا به مصرف برسد. برای خرید این محصول ویا کسب اطلاعات بیشتر میتوانید به وب سایت تهویه رویال نوین ایرانیان مراجعه کنید.

    ReplyDelete
  41. Design and development is concerned with the development as well as maintenance of computerized information systems, which help in the smooth functioning of organizations. The scope of the subject is quite vast, which means your professors can assign you ‘n' number of topics. However, this is something you need not panic about as our system architecture analysis and design assignment writers, and editors can tackle just about any topic. Here’s a sizeable list of topics that our system analysis design assignment help have worked on-


    Allessaywriter.com is dedicated to offering premium quality essay writer across all genres, including cause and effect, descriptive, comparative, argumentative and more. If you need flawlessly drafted and well-referenced essay writing at the best price, look nowhere else, and count on us.

    ReplyDelete
  42. Need assignment help at minimum cost. Here we are present certified services to our clients and complete work at a given time limit. We never miss any kind of deadlines. essayassignmenthelp.com.au is the best place for any kind of assignment help at very affordable prices. you even don't need to worry about those custom writing help from university because we also have best paper writer and if you feel it hard to deal with long essay do not worry just search fro write my paper and our expert will help you. so next time if you want a essay writer service we will be their to help you. visit us at - myassignmenthelp

    ReplyDelete
  43. Assignment help students gain in-depth subject knowledge, build academic skills, and reinforce what's taught in class. Despite that, 80% of students worldwide find assignments annoyingly dull, unnecessary, and time-consuming.
    While some of them use free online devices such as an essay maker or a paraphrasing tool to generate quick results, most students turn to professional writers for top-notch writing support.
    With the rising demand for professional writing support, the number of homework help services has hit a new record. Every other academic writer is claiming to deliver the best service at the best price in the industry.
    But how do you find the actual writers who deliver the best essay help service in the truest sense? Worry not! We will give the best tricks to rope in the best academic writers on the digital platform.

    1.Carefully study the website:
    Before you discuss your assignment requirements with the writer, go through the website carefully. Instead of focusing on the design and aesthetics, read the published content on the website pages, blogs, articles, etc. It will help you understand the essay writer quality of writing.
    2.Check the range of services they offer:
    Always avoid websites and writers that offer a limited number of essay writer service. A true academic writer has the experience of writing all types of assignments – be it a dissertation, term paper or an MBA admission essay with utmost efficiency.

    ReplyDelete
  44. This is the reason why they look for MBA marketing project assignment help online to take relief from their daily tasks. If that’s what you want, then the best option for you would be to hire MBA writers from MyAssignmenthelp.com where you will get the best MBA writing service at a pocket-friendly price.

    ReplyDelete
  45. Mathematics is a versatile subject that can be broadly categorized into two classes, and our mathematics assignment help experts in UK will assist students in these fields:

    ReplyDelete
  46. Avail the best assignment help service online with expert paper writer who are ready to help you. if you search for write my paper we can help you, with custom writing work. our essay writer are best in world. visit us at- myassignmenthelp

    ReplyDelete
  47. You don’t want to submit an essay with glaring grammar and punctuation errors, do you? Check out these 4 grammar rules that your paper editor wants you to know. These tips will help you in the long run and elevate the quality of your essays easily.
    Implement the following tips while writing your coursework help to nail the paper like a pro. Also, you may not have to hire an essay editor since you can edit the paper yourself!
    Tip 1: Run-on sentence
    A run-on sentence consists of two complete sentences separated by a comma. This is not the same as other long sentences. You need to use a conjunction to fix a run-on sentence. You can have a word with online paper editing editors to understand the concept of run-on sentences even better.
    Example:
    Wrong: Practise gets over at 5 pm, you need to pick up Clara in time.
    Right: Practise gets over at 5 pm, so you need to pick up Clara in time.
    You can also use a semi-colon or a period to complete the two sentences. You may take time to implement the changes. Until then, opt for online instant assignment help to make the changes for you.
    Tip 2: Bad pronoun usage
    Pronouns are wonderful little words that make writing and speaking easier. They replace nouns to make the writing look and sound simpler. Here is a terrible usage of pronoun that most of the students make:
    Everybody must bring their own tiffin.
    ‘Their’ is a pronoun, but it is not appropriate for this sentence. His/her would have been perfect since it agrees with ‘everybody.’
    Tip 3: Subject-verb disagreements
    Many students type ‘edit my essay’ on Google because they assume editing is a time-consuming process. Well, it isn’t, if you know the right techniques. Errors in the subject-verb agreement are quite common among students. Keep a single rule in mind, and you can take care of it easily.
    A singular subject needs a singular verb. A plural subject requires a plural verb.
    Still confusing? Don't freak out, yet. Check out these examples to Programming help you understand better.
    Example 1
    Wrong: There’s some wonderful books being published this week.
    Right: There are some wonderful books being published this week.
    Example 2
    Wrong: Here’s guidelines to work on grammar errors.
    Right: Here are guidelines to work on grammar errors.
    Tip 4: Dangling modifiers
    If you use Grammarly, then you must be familiar with this term. A Dangling modifier is a word that does not relate logically and clearly to the word it modifies. The sentence with a dangling modifier seems abrupt to your professors, and they will deduct marks without a second thought. Now you can eliminate these errors from your accounting homework help in no time. Here is an example of dangling modifiers:
    Incorrect: Having finished the essay, the TV was turned on.
    Correct: Having finished the essay, Jill turned on the TV.
    ‘Who turned on the TV?’ The first sentence doesn’t indicate the doer of the action. But, the second sentence clearly states that ‘Jill’ has turned on the TV.
    These are the most common mistakes students make in their English papers. Revise your paper thoroughly to keep a check on these flaws. Hopefully, nothing can stop you from getting good marks in the paper.

    ReplyDelete
  48. For completing a Cloud computing homework, you need to understand the basics of the subject. With our Cloud computing assignment help, you can easily understand the theoretical part along with its practical application.

    ReplyDelete
  49. This comment has been removed by the author.

    ReplyDelete
  50. Are your daily essay making you anxious? Have you been feeling burdened by herculean essay by your teacher? Don't worry anymore. essay help is here to wipe out all your dilemmas. Whenever you get stuck between your essay and you can even get essay checker here , our professionals essay writer are just an approach away. They will prepare your essay in a well-organized and plagiarism-free manner before the deadline. Hence, buy coursework to leave all your anxiety behind to improve your skills and grades. You will even get math problem solver here. get help fro best research paper writing service and essay. visit us at- myassignmenthelp.

    ReplyDelete
  51. Assignment writing service providers offer you assignment writing services for more than 100+ subjects of various fields. If you want to take the best assignments help then buys the assignment writing help from a genuine assignment service provider. Assignment writing experts are available for your help all day and night. You will never face any problem in the related subject if you take the assignment help from an expert. Thus take the expert help and submit a well-written assignment.

    ReplyDelete