1. Information
Malicious hackers are trying to spread malicious files with using Christmas season and the end of the year.
Users need to be careful on using about "Christmas, video URL, season's greetng, SNS message, or shorten URL", especially on e-mail with attachment or URL.
Malicious file distributors are using social engineering and social issues for spreading malicious files.
Our team was fortifying our emergency monitoring during Christmas season, and we found many spreading cases.
[Information] Be careful about scams around the end of the year
http://en-erteam.nprotect.com/2011/12/information-be-careful-about-scams.html
Issues on 2011 and predictions of upcoming 2012
http://en-erteam.nprotect.com/2011/12/issues-on-2011-and-predictions-of.html
http://en-erteam.nprotect.com/2011/12/information-be-careful-about-scams.html
Issues on 2011 and predictions of upcoming 2012
http://en-erteam.nprotect.com/2011/12/issues-on-2011-and-predictions-of.html
2. Malicious files related Christmas
During this Christmas, MS Word exploit, Christmas program, and PDF exploits have been reported.
* Case1 - THIS XMAS SAY NO TO MADE IN CHINA
This e-mail seemed to be related Tibet, and it contains attachment which name is "THIS XMAS SAY NO TO MADE IN CHINA.doc".
It is malicious and installs malicious file secretly.
This e-mail is expected to spread malicious files to multiple countries.
And the recipients are including Indian, Nepalese, Switzerland's, Japanese, Canadian, French, Russian; therefore, attacker seemed to attack Tibet related users.
If user executed attachment, it will create normal document file and shows to user, then it will create another malicious file and execute.
Let's see the document.
Those files including wordupgrade.exe will be created in Temp folder and executed, and it hides itself with using batch command.
Upon executed malicious "wordupgrade.exe", it will install additional malicious file disguised as internet service function, then "wordupgrade.exe" will be deleted itself by batch file command.
C:\Program Files\Online Services\Internet Services.exe
Executing "Internet Services.exe" will create other malicious files, which will also be deleted by its batch file command.
And then, it accesses to certain host and waits for additional commend. When remote control connection is established, Backdoor can work and victim's PC can be in danger.
* Case 2 - Malicious file disguised as Christmas decoration program
Christmas tree desktop program can be seen in right bottom of desktop.
This freeware can be downloaded on http://get-xmas.com/, malicious file distributor injected malicious code and repackaged.
Malicious file uses WinRAR SFX(Self-extracting), and it contains various malicious files including normal mas.exe.
Once executed, it will create "udp.exe, taskngr.exe, drv.cmd, mas.exe, spoolcv.exe, svghost.exe" on system folder, and it can update additional malicious file on accesses certain domain.
http://pi(~~).ge/p(~~)/svghost.exe
http://pi(~~).ge/p(~~)/udp.exe
http://pi(~~).ge/p(~~)/install_flash_player.exe
http://pi(~~).ge/p(~~)/udp.exe
http://pi(~~).ge/p(~~)/install_flash_player.exe
Especially, disguised as install_flash_player.exe is the biggest feature of this file, and it adopted WinRAR SFX as similar as the program above.
This malicious file can download additional malicious file disguised as flash player.
* Case 3 - Malicious file using PDF exploit
Merry Christmas.pdf uses Adobe Reader program's vulnerability and installs secretly.
When malicious PDF file is executed, it is disguised as a normal file with showing normal document.
And it installs malicious gupdater.exe on Application Data folder with using updates.js, Winword.js coded by Embedded JavaScript
3. How to prevent
Social engineering can be on users via e-mail or SNS. To use PC safely from security threats of these malicious attachments, we recommend you download latest security updates and obey following "Security management tips" for general users.
Security management tips
1. Maintain the latest security update on OS and applications
2. Use anti-virus SW from believable security company and keep updating the latest engine and using real time detecting function
3. Do not see and download attached file from suspicious e-mail.
4. Keep caution to link from instant messenger and SNS.
1. Maintain the latest security update on OS and applications
2. Use anti-virus SW from believable security company and keep updating the latest engine and using real time detecting function
3. Do not see and download attached file from suspicious e-mail.
4. Keep caution to link from instant messenger and SNS.
INCA Internet (Security Response Center / Emergency Response Team) runs responding system against various security threats.
شركة نقل الاثاث بالرياض
ReplyDeleteشركة تخزين الاثاث بالرياض
شركة نقل الاثاث بجدة
شركة نقل الاثاث بالدمام
شركة نقل الاثاث بمكة
شركة نقل الاثاث بالمدينة
شركة نقل الاثاث بالطائف
شركة شراء الاثاث مستعمل بالرياض
شركة نقل الاثاث بالرياض
شركة نقل الاثاث بجدة
شركة شراء الاثاث مستعمل بالرياض
شركة نظافة بالرياض
ReplyDeleteتنظيف منازل بالرياض
تنظيف الخزانات بالرياض
شركة تنظيف المنازل بالدمام
افضل شركة تنظيف بجدة
شركة نظافة المنازل بجدة
شركة تنظيف بمكة رخيصة
شركة تنظيف المنازل بالمدينة
افضل شركة تنظيف بحائل
افضل شركة تنظيف بالطائف
شركة تنظيف ببريدة
ReplyDeleteشركة مكافحة الحشرات بجدة
شركة مكافحة الحشرات بالرياض
شركة مكافحة الحشرات بالاحساء
شركة كشف تسريبات المياه بالرياض
شركة كشف التسريبات بجدة
------------------------------
شركة كشف تسريبات المياه بجدة
شركة كشف تسريبات المياة بالدمام
شركة تسليك المجارى بجدة
شركة تسليك المجارى بالدمام
شركة كشف تسريبات المياة بالاحساء
ReplyDeleteشركة مكافحة حشرات بأبها
شركة مكافحة حشرات بجدة
شركة تخزين عفش بالرياض
شركة مكافحة حشرات بالطائف
شركة مكافحة حشرات بخميس مشيط
-------------------------------------------------
شركة تنظيف بحائل
شركة تنظيف منازل بحائل
شركة تنظيف مجالس بحائل
شركة تنظيف موكيت بحائل
----------------------------------------------------------
شركة مكافحة حشرات بالدمام والخبر
شركة مكافحة حشرات بالجبيل
شركة مكافحة حشرات بالأحساء
-------------------------------------
شركة مكافحة حشرات رش مبيدات بجده
شركة مكافحة حشرات بجدة
ReplyDeleteشركة رش مبيدات بجدة
شركة تنظيف منازل بجدة
شركة عزل خزانات بجدة
شركة تنظيف بجدة
شركة مكافحة حشرات بمكة
شركة رش مبيدات بمكه
شركة مكافحة حشرات بالطائف
شركة رش مبيدات بالطائف
شركة تنظيف بالطائف
-----------------------------------
شركة شفط بيارات بالرياض
شركة تسليك مجارى بالرياض
شركة تنظيف بالمزاحميه
شركة نقل عفش بالمزاحميه
شركة نقل عفش بالمجمعه
شركة كشف تسربات مياه بالمزاحمه
شركة تنظيف بالخرج
شركة نقل عفش بالخرج
شركة مكافحة حشرات بالخرج
ReplyDeleteشركات نقل الاثاث
شركات نقل الاثاث
شركات نقل الاثاث
شركات نقل الاثاث
شركات نقل الاثاث
شركات نقل الاثاث
Welcome to the Best writer Review, Here you can get the best All Assignment Help reviews sites. We strongly urge you to check our entire website once and we will assure you will find this review website very useful. Our hard work will be rewarded if students like you will appreciate our effort and spread the message about this site with your class-fellows and friends.
ReplyDeleteI feel it interesting, your post gave me a new perspective! I have read many other articles about the same topic, but your article convinced me! Thanks your share!
ReplyDeletekingoroot app
ReplyDeletekingoroot apk
kingoroot app download
https://irantahsil.org/
ReplyDeleteThank you ever so for you article post.Really looking forward to read more.
pls see my site
Thank you ever so for you article post.Really looking forward to read more.
ReplyDeleteThank you for sharing your details and experience. I think it very good for me.bloons tower defense 5
ReplyDeletesuper smash flash 2
oginsta apk
ReplyDeletemodbro apk
ogwhatsapp apk
show box apk
spotify premium apk
gbwhatsapp apk
tubemate apk
videoder apk
great post. thanks for sharing this information
ReplyDeleteKineMaster for pc
Free fire for pc
https://www.kinemasterforpcdownload.co/
https://www.freefirepcdownload.online/
Game Guardian APK
ReplyDeleteSuperSu APK
Root explorer APK
Whatsapp Plus APK
Game Hacker APK
Blackmart Alpha APK
GBWhatsapp APK
GetAPK Market APK
Freedom APK
ac market
ReplyDeleteac market apk
ac market pro
download ac market
www.acmarket.com
ac market install
ac market latest version
ac market download free
ac market downloading
ReplyDeleteكلادينج
الكلادينج
واجهات كلادينج
ديكورات كلادينج
شركة كلادينج
كلادينج الرياض
افضل كلادينج تكنوبوند
مصنع كلادينج بالرياض
كلادينج مصر
مظلات المشاريع
ReplyDeleteمظلات سيارات
مظلات
مظلات خشبية
مظلات شد انشائي
سواتر
مظلات منازل
مظلات للحوش
مظلات اسطح
مظلات كابولي
This comment has been removed by the author.
ReplyDeletevizer tv apk
ReplyDeletewikiweb.co.in
lucky patcher
gbwhatsapp apk
مؤسسة مكافحة حشرات بمحايل صعب مكافحة الحشرات بمحايل صعب و الشغل فى أبادتها نهائيا فشركتنا من المؤسسات المختصة و الرائدة الاولى فى ذلك الميدان
ReplyDeleteشركة مكافحة النمل الابيض بالقطيف
شركة مكافحة حشرات بالقطيف
شركة رش مبيدات بالقطيف
شركة الانوار لرش المبيدات
https://www-acmarket.com
ReplyDeleteac market
ac market download
download ac market
ac market downloading
Best Valuable Information check this Latest Mod Apk's
ReplyDeleteapkbooster
blackmart
Ac market
Live Net Tv
King root Apk
tutuapp has a champion among the best UIs which empowers customers to use it suitably. tutuapp apk download , if they face any issue, they may get the help of the application's help center to get help.
ReplyDeletehttps://www.evernote.com/shard/s522/sh/e2f25f10-2e41-4a8c-8e32-49fdef3cccbf/a41337a180ae31f06083e3b9c50fb26d
ReplyDeletehttps://acmarket21.tumblr.com/post/184032843007/iphone-5g-release-date-when-will-the-5g-iphone
https://acmarket2.doodlekit.com/blog/entry/4873752/redmi-go-now-available-on-open-sale-in-india-price-specs-and-launch-offers#
https://acmarketwin.my-free.website/blog/the-features-google-should-borrow-from-the-galaxy-s10
http://acmarketwin.wikidot.com/
ReplyDeletehttps://5ca725bca546a.site123.me/my-blog/best-new-android-games-to-play-this-april
https://acmarket.kinja.com/motorola-moto-g7-and-one-lines-are-getting-google-s-cal-1833830964?rev=1554455852236
https://sites.google.com/view/acmarketwin/home?authuser=1
applock is a lightweight application that gives you a chance to bolt practically any sort of document on your Android.
ReplyDeleteBest Apps to watch movies and TV shows online
ReplyDeleteMovie HD Apk
Vizer TV Apk
Morpheus Apk
Mobdro Apk
Live NetTv Apk
نحن نعتبر من شركة تنظيف مجالس بخميس مشيط
ReplyDeleteالاقوي في التعامل مع الأتربة
شركة تنظيف سجاد بخميس مشيط
وتلك الحشرات التي تجعلنا دائما
شركة كشف تسربات المياه بالرياض
في حالة الصرع المستمر
شركة تنظيف شقق بخميس مشيط
والدائم في التعامل مع كل العناصر الذي تم عندما يستخدم المكانس الكهربائيه و على ما جالك من المعدات و المنظفات
شركة تنظيف منازل بخميس مشيط
من أجل الحصول على السطح الجاف النظيفة التي
شركة نقل عفش بخميس مشيط
ترسم من استقبل القبله الأول في تلك الاعمال والانشطة
ده كله ما علينا هو إثبات تلك المهام التي تجعلنا
شركة عزل اسطح بخميس مشيط
دائما الافضل والاسرع في كل تلك الأمور
التخلص من الأتربة وخيوط العنكبوت
من الاتربه ما يكون دائما في انتشار
شركة رش مبيدات بخميس مشيط
مستمره فى الموقع وهو ما يجعل كل الارضيات الجدران في المنازل وفي الفنادق في كل الأماكن والمواقع التي تحتاج التوظيف
شركة عزل خزانات بخميس مشيط
دا واجب علينا الي في شركه التعامل بكل الحكمة والمهارة من أجل التخلص من تلك الأتربة خيوط العنكبوت
شركة كشف تسربات المياه بخميس مشيط التي تعتبر من الاشياء المناسبه لها دائما وفي ذلك نحن نستمر وانا اعمل من اجل رفع القدرة والكفاءة الخاصة بنا وإدراك الفاعلية والكفاءة في التنظيف
الكفاءة في التنظيف
https://www.mobypicture.com/user/shareitweb
ReplyDeletehttps://shareitweb.tumblr.com/post/184269240668/shareit-has-become-bloated-so-here-are-some-best
https://www.ranker.com/profile-of/shareitweb
https://sites.google.com/view/shareitweb/home?authuser=3&read_current=1
https://soundcloud.com/user-3186650
https://justpaste.it/2qsm5
https://photoshopcreative.co.uk/user/shareit
Thank you so much for the wonderful information. I appreciate it very much.
ReplyDeletehappy chick
happy chick apk
happy chick emulator
happy chick download
download happy chick
happy chick apk download
Thanks for it though!!
ReplyDeletefreedom free apk
freedom apk game list
freedom last version
http://www.bakespace.com/members/profile/Testdpc/755329/
ReplyDeletehttps://www.mobafire.com/profile/josephcat-881926?profilepage
https://lookbook.nu/susansotoka
https://steepster.com/wpatester
https://challenges.openideo.com/profiles/susansotoka
https://onmogul.com/wpstester
https://weheartit.com/susansotoka
https://publiclab.org/profile/susans
https://publiclab.org/profile/josephcatrong
ReplyDeletehttps://weheartit.com/josephcatrong/uploads
https://onmogul.com/josephcatrong
https://challenges.openideo.com/profiles/josephcatrong
https://steepster.com/josephcatrong
https://lookbook.nu/josephc
https://stocktwits.com/josephcatrong
https://itsmyurls.com/josephcatron
https://www.intensedebate.com/people/vickyellen11
ReplyDeletehttps://www.ranker.com/profile-of/vickyellen
https://vickyellen.picturepush.com/profile
https://www.goodreads.com/user/show/98518697-vickyellen
https://my.desktopnexus.com/vickyellen/
http://wabiazo.com/profile/6110
Helo is a content sharing platform to write and share WhatsApp Status, Shayari, Memes, Trending Jokes, Wallpapers and more with your friends.
ReplyDeletehttps://heloapp.xyz/
helo app
helo app Apk
helo app download
helo app download apk
From our custom research essay writing services, students can hire the best writers and be assured to receive the best custom papers when they search buy a custom research paper written by experts.
ReplyDeleteThanks for providing apk flie for free
ReplyDeleteshareits
Thanks for providing the smartphones features & specifications
ReplyDeletemytechmobiles
شركة المراكز الاولي للخدمات المنزلية
ReplyDeleteشركة كشف تسربات المياه بالدمام
https://liveenettvapk.biz/
ReplyDeleteLive Net Tv
Live Nettv
Live Tv Net
Thank you so much for the information. Very good post
ReplyDeleteYoWhatsApp APK
FMWhatsApp APK
Happy chick APK
TutuApp APK
Mobdro apk
Spotify Premium apk
SHAREit apk
ReplyDeleteExcellent Blog! I would like to thank for the efforts you have made in writing this post. I am hoping the same best work from you in the future as well.
I wanted to thank you for this websites! Thanks for sharing. Great websites!
Blackmart APK https://apkfasak.com
thoptv apk
GBWhatsApp APK
FMWhatsApp APK
Ac Market APK
TutuApp APK
ReplyDeleteExcellent Blog! I would like to thank for the efforts you have made in writing this post. I am hoping the same best work from you in the future as well.
I wanted to thank you for this websites! Thanks for sharing. Great websites!
Pubg APK Pubg Mobile APK
Pubg
Pubg Download
Download Pubg Mobile
Pubg Mobile Download
ReplyDeleteExcellent Blog! I would like to thank for the efforts you have made in writing this post. I am hoping the same best work from you in the future as well.
I wanted to thank you for this websites! Thanks for sharing. Great websites!
thop tv
Blackmart APK
GBWhatsApp APK
FMWhatsApp APK
Ac Market APK
TutuApp APK
As much as an Affordable Term Papers is a summary of other works that should not be an excuse to many Pre Written Research Paper with plagiarized work. They ensure that the arguments are presented in a discussion and reflective manner to maintain the aspect of originality as well as show the audience that they understand what they are presenting on the Buy Pre Written Essays.
ReplyDeleteThank you so much for such detail post, this gonna help so many for sure!!
ReplyDeleteNew Year Wishes With Quotes 2020
New Year Quotes on Friendship 2020
The Buy Pre Written Essays that clients receive from the firm are of impeccable quality that assures of impressive Buy Term Papers Online performance in academics and other Buy Pre Written Research Paper projects.
ReplyDeleteI simply must tell you that you have an excellent and unique post that I kind enjoyed reading. thank you for sharing with us. keep moving. GHD SPORTS APK
ReplyDeleteGHD SPORTS
gomax tv
ghd sports
Many thanks for providing this information.
ReplyDeleteNew Year Funny Quotes for Friends and Family
New Year Wishes for Business Clients
I am really loving the theme/design of your web site. Do you ever run into any browser compatibility problems? A few of my blog readers have complained about my website not working correctly in Explorer but looks great in Chrome. Do you have any tips to help fix this issue?how to download video from tubemate
ReplyDelete