[Issue] APT attack from Taiwan related one of Taiwanese airline companies

1. Introduction

INCA Internet response team announced Taiwanese APT attack with using time interval April, 2012 and still collects related information. Among them, we found another type of APT attack disguised as sent from airline company(EVA AIR). Attacker aimed for officers who work at Council of Agriculture (Republic of China) and Department of Health (Republic of China).
Malicious file used for attack was disguised as a receipt of e-ticket and its icon as a folder.

INCA Internet response team are chasing for assuming that this attack will be one of previous APT attacks for office workers.

2. APT attack disguised as sent by airline company

[Issue] Several APT attacks on Taipei with time interval 

Attacking cases for Taiwanese government officers are continuously found still in these days. First of all, attacker attacked to officers who work for marketing team of Council of Agriculture (Republic of China) with sending message as "EVA Airline e-ticket receipt" including malicious files on July 3, 2012.

This e-mail contains compressed file(69380236_10107_receipt.rar) which contains malicious file, "69380236_10107_receipt.exe".

Next day, similar malicious mails sent to officers who work for public health team of Department of Health (Republic of China) with sending message as "Special price of Cathay Pacific Airlines".

We can assume that one attacker or organization made same attack due to same malicious files.

"69380236_10107_receipt.rar" contains malicious file which has folder-typed icon.

Upon executing "69380236_10107_receipt.exe", it will create "atievxx.exe" on (Temp) folder.

And then, it will create "69380236_10107_receipt" folder and 69380236_10107_receipt.pdf" file its inside.

"69380236_10107_receipt.pdf" is locked by password. These days, we got many locked files using for APT attack. Therefore, locked files especially document files including(PDF, HWP, DOC, XLS) has great possibility of malicious file. When you think you are infected, you'd better change your e-mail password and personal information.

"atievxx.exe" will wait additional command and can be exposed by leaking various information and working as a backdoor from attacker after accessed certain host in Hong Kong.

3. Summary

We have to notice that various APT attacks are booming in these days. Besides, users need to be careful from being exposed by security threats. To use PC safely from security threats of these malicious attachments, we recommend you download latest security updates and obey following "Security management tips" for general users.

Security management tips

1. Maintain the latest security update on OS and applications
2. Use anti-virus SW from believable security company and keep updating the latest engine and using real time detecting function
3. Do not see and download attached file from suspicious e-mail.
4. Keep caution to link from instant messenger and SNS.

INCA Internet (Security Response Center / Emergency Response Team) runs responding system against various security threats.
nProtect Anti-Virus/Spyware v3.0 diagnoses and treats various variant files.

Free installation link of nProtect AVS : http://avs.nprotect.com/


  1. I was looking through some of your blog posts on this site and I believe this web site is really informative! Keep on putting up.This site is really helpful for us. and also like it .Very wonderful information can be found on web blog . “The quality of an organization can never exceed the quality of the minds that make it up http://www.religionstube.com/categories/7/Music-Videos

    1. I am glad that I saw this post. It is informative blog for us and we need this type of blog thanks for share this blog, Keep posting such instructional blogs and I am looking forward for your future posts.
      Cyber Security Projects for Final Year

      JavaScript Training in Chennai

      Project Centers in Chennai

      JavaScript Training in Chennai

  2. Explore more great articles on a topic (just like this one) at this https://writemypaper4me.org/blog/how-to-title-essay website, guys.

  3. Ahh that is great thank you ! Good for special needs too!

  4. Your Article provides useful information for more details visit aio downloader tutuapp Cartoon HD

  5. Internet marketing is ever evolving one dollar hosting this year. These 5 things will propel you to the top and earn you more profits.

  6. Online Advertising has come a long way since its inception in the year 1994. In its early days, it was dominated by the https://brainclubs.com/ and the content of traditional advertising, but now, the scenario has changed. Online Advertising has evolved quickly, acquiring the status of an indispensable tool for brand building and promotion in this competitive age.

  7. شركة مكافحة الفئران بالرياض http://tiny.cc/6lph5y  أصبح يوجد الكثير من شركات مكافحة الفئران في الرياض ، التي تعمل في القضاء على أي نوع من الحشرات سواء كان قوارض أو زاحفه أو طائره بشكل نهائي، و نظراً لكثره شكاوي مدينه الرياض من الفئران والقوارض.

    فقد قررت الشركة على أن تكثف اهتماماتها بأعمال مكافحة الفئران و القضاء على مشكله القوارض المزعجة بشكل نهائي.
    كما أن حرصت شركة مكافحة فئران بالرياض على أن توفر طرق تساعد على التخلص من كافة أنواع الفئران بأحجامها المختلفة.
    لأننا جميعاً نعلم أن تواجد القوارض في المنزل من أكثر الأشياء التي تسبب للسيدة الرعب والفزع، ولكل للموجودين بالمنزل وبالأخص الأطفال ومن المعروف أن الفئران من القوارض التي تقوم بتخريب المنزل وتقضي على الأخضر واليابس بها عن طريق على تدمير الأثاث الخشبي والطعام لذا حرصت الركة علي ان تخلصك من كل هذه المشكلة في أسرع وقت ممكن فبادر بالاتصال بها. … اقرأ المزيد

    المصدر: شركة مكافحة الفئران بالرياض

    افضل شركة جلي بلاط بالرياض http://tiny.cc/5pph5y  لا شك أن رونق البلاط أو الرخام يساهم في تحسين المظهر في الفلل والقصور كما يضفي بريقا لامعا على مظهرها مما يعني أن اتساخها و تغطيتها بالأتربة يجعلها تفقد ذلك البريق .
    تقدم شركتنا أفضل خدمة لجلي البلاط والرخام وإعادة مظهره اللامع والبراق له مع توظيف كافة المعدات الحديثة لديها و أمهر عمالة مدربة على هذا الغرض .
    للشركة باع طويلة وخبرة سابقة في تنظيف الرخام والبلاط للفلل والقصور والمنازل ومداخل الشركات والمكاتب والمؤسسات
    لسنا الوحيدين لكننا الأفضل في عالم جلي الرخام والبلاط وإعادة مظهره البراق ولمعته وبدون تجريحه أو خدشه وهذا سر تميزنا عن باقي الشركات … اقرأ المزيد

    المصدر: شركة جلي بلاط بالرياض

  8. If you wish to create a digital road-map for your organization, it is important for you to implement smart and effective digital marketing services for better results. Digital media is pervasive today and customers have access to information any time, any where. Be it for shopping, news, entertainment or social interaction, consumers are now hostpapa hosting review to a wide variety of information, and therefore, companies must amp up their digital marketing services to retain customer attention.

  9. You nailed it. very good writing skills.Great post keep sharing.
    note=Geek squad support provides the best troubleshooting solutions regarding your technical issues, if you need the best service for the hardware devices then we are here to give you the best services for your devices. Geek Squad tech support is a 24/7 helpline provider.

  10. It is good to get the information about APT attack which has been pursued by the Taiwanese airline, it is quite shocking.
    Do you know? If you are a QuickBooks Enterprise platform user and finding any kind of assistance then get it easily from QuickBooks Enterprise Support Number.

  11. Attacks like these prompts everyone to stay safe from the threats of the digital world.
    If you want your work to be professional and fast then use Microsoft Office Suite, as its tools and features gives you lots of ease when you work. Download Office today!

  12. It is quite frightening to read all sorts of news related with digital or cyber attacks that are happening around the globe, the risk is really very high these days. Similarly; if you have an HP Printer and you do not pursue HP Driver Update time to time then there are higher chances that your printer might not work properly.

  13. If you are a QuickBooks user, get all the issue related to QuickBooks in one place i.e., from the download to the installs and any problems in understanding any of its features, get help from our specialist immediately, they will give you the most of your issues. Will provide a good solution. You can simply contact QuickBooks Support Phone Number and tell them your issue.

  14. QuickBooks is the most extreme eminent bookkeeping application in the market today. Everybody realizes that Intuit QuickBooks is very popular for creating and structuring adaptable duty and bookkeeping programming that defends complex errands to release business efficiency. Yet, it is additionally obvious that the work area variant of QuickBooks has some substantial restrictions, which make it difficult for organizations to follow the supportable development. In my estimation, organizations need to change to the cloud-based QuickBooks Support so as to profit propelled highlights, upgraded security, and compactness.Our toll free no - +1(888)253-0666
    Visit : Quickbooks Support

  15. If you are still facing the same nagging error, then simply dial our toll-free number +1(800)880-6389. Our team of QuickBooks error technical support experts will be there to assist you in a single call.

  16. it seems really amazing.if you are looking for an antivirus which can keep your data secure from virus and malware then you can pick Norton Antivirus. it holds the best method to prevent these malwares to prohibit the enterance. you can get the Norton Setup and install it in your device to make it work.

  17. We understand that students in Australia encounter different challenges in completing their Best Custom Essay Writing Service. We offer Best Online Paper Writing Service to students regardless of their specialty, discipline or educational level.

  18. Your article is very informative and helpful to me. Thank you for the post it's really nice.
    Quickbooks customer support | QuickBooks Support | Quickbooks helpline number

  19. Thank™ you for sharing excellent information. ✆ Your website is so cool. I am impressed by the details that you have on this website ☞ It reveals how nicely you understand this subject. Bookmarked♠ this website page, will come back for extra articles. You, my friend, ROCK£ I found simply the info I already searched everywhere and simply could not come across. What a great website. Visit௹☞ Norton.com/setupoffice.com/setupTelstra supportPlumbers Near Me | office.com/setup | Nurton.com/nu16..

  20. Thank you so much for this wonderful Post and all the best for your future. I hope to see more post from you. I am satisfied with the arrangement of your post. You are really a talented person I have ever seen. Norton.com/setup


  21. To install office setup you have to select the downloaded file otherwise insert the office setup CD disc. If you use the CD disc then you have to enter the Office Product Key for authorizing it. After selecting the downloaded file you have to run or setup this file on your computer.


  22. Shelves are wonderful in organizing things and storage and also keep different purposes on them from family photos or books or different tools as the shelves are beautiful as part of the decorations of the house you have to remove the dust quickly and distinctively if my step this every day it does not take any time at all in addition to these The step helps to maintain the decorations of the place distinctively Vamr cleaning is very important and national application of the company is interested in cleaning boards in Riyadh, in order to reach the best possible board you can see your eye and the comfort of the psychological and calm.
    شركة نظافة في الرياض

    شركة تنظيف

    شركة تنظيف منازل

    شركة تنظيف شقق

    شركة تنظيف فلل

    شركة تنظيف مجالس

    شركة تنظيف كنب

    مغاسل الجبر

    شركة تنظيف موكيت

  23. Download Or Install Office Setup Step 1. Go to www.office.com/setup - Sign in, 2nd. Enter product key, and 3rd. we can also help you with office.com/setup online.

  24. www.trendmicro.com/downloadme
    For Trend Micro Download , you must create a Trend Micro account from trend micro that can help you in smooth Trend Micro installation. Protect your systems and online data from multiple threats, including viruses, spyware, identity theft, malware, rootkits, Trojans, phishing attacks, ransomware, Adware, Worms, Bots, Horses, and other threats.You can activate the Trend Micro software by installing the Trend Micro download

  25. Thank you most for this excellent Post and every one the foremost effective for your future. I hope to ascertain different post from you. i'm glad with the arrangement of your post. you're terribly a adept person I even have ever seen.Visit@- mcafee.com/activate | mcafee.com/activate | norton.com/setup | mcafee my account


  26. norton.com/setup - Secure your PC by downloading, introducing and actuating Norton security. Confirm your item key at norton.com/setup and get the arrangement for your Windows or Mac PC.


  27. the user must purchase a license of Avg antivirus from the retail store or online. Though download AVG software is the easiest process, your system must match the essential prerequisites of Avg antivirus. Once you will get AVG activation code and will create an AVG account , then you can install AVG with license number. install-avg-with-license-number | www.avg.com/activation | www.avg.com/retail

  28. Norton is a reputed and cost-effective antivirus suite
    company which offers protection so that no virus can damage
    your computer. It also provides many other products and
    services apart from antivirus.


  29. Norton is a reputed and cost-effective antivirus suite
    company which offers protection so that no virus can damage
    your computer. It also provides many other products and
    services apart from antivirus.

  30. Webroot Safe install is the most popular computer security that helps you to protect Windows,Mac and Android devices.

    Below mentioned are the services provided by webroot geek squad

    Below mentioned are the services provided by webroot geek squad

    geeksquad webroot install
    install webroot geek squad
    installing webroot geek squad download
    weboot.con/geek squad
    webroot bestbuy
    webroot bestbuy download


  31. Download trendmicro on your mac and pc and secure them from data theft.

    Below mentioned are the services provided by downloadcenter.trendmicro.com


    trend micro download
    trend micro geek squad
    trend micro internet security

  32. Trendmicro activate for your mac and pc.
    When you activate trendmicro antivirus, it protects your device from unwanted threats.

    Below mentioned are the services provided by trendmicro activation


    trend micro activation
    activate trend micro internet security
    install trend micro activation code
    trend micro internet security activation

  33. AVG is compatible with almost all the devices, including computers, windows, laptops, and smartphones.
    www.avg.com/retail |

  34. Download webroot on your devices now.


    webroot geeksquad download
    webroot installation without cd
    webroot key
    webroot key code activation
    webroot keys
    webroot new keycode

  35. Trend micro best buy is one of the best security software provided by best buy to its customers.


    trend micro best buy download
    trend micro login
    www trendmicro com best buy downloads

  36. Install Kaspersky with activation code https://kaspersky-activate.com

    install kaspersky with activation code | How to install and activate kaspersky on multiple computers

    • Each copy of a multiple-device license for Kaspersky Anti-Virus 2019 (for example, a 3 PCs license) is installed and activated in the same way on all computers you want to protect.
    • In conclusion to activate Kaspersky Internet Security 2016 on all computers, use one and the same activation code you purchased.

    Install Kaspersky with activation code

    activate kaspersky internet security

    kaspersky geek squad download install


    Activate Kaspersky Internet Security for Mac

    reinstall kaspersky total security

    kaspersky without cd

  37. If you have a poor credit history, you may feel like you're trapped in a Catch 22: you can't borrow money because your score is low, but you can't improve it because no one will lend you money. Even meeting small, regular repayment obligations can improve your financial profile, but it is hard to find anyone who will give you this opportunity. get a long term loan

  38. Install kaspersky on your computer and secure it from cyber threats.


  39. Just wanna comment that you have a very nice internet site , I love the design it actually stands out. read this article

  40. Marketing strategy plays a very imperative role in whirling a business into a successful brand. There exists a massive demand in terms of digital marketing platform in past few years but now with the advent of Digital Marketing Services, the problem has vanished as many businesses are opting for digital marketing to reach their audience. logo design company in india

  41. I’ve recently started a site, the information you offer on this web site has helped me greatly. Thank you for all of your time & work. girls whatsapp no for chat

  42. I like this website it's a master piece! Glad I found this on google. FaceTune Free Download

  43. Good job on this article! I really like how you presented your facts and how you made it interesting and easy to understand. Thank you. free ig likes

  44. Vipre antivirus is one of the best security software available online today.


    vipre download already purchased

    vipre download and install
    vipre download with product key
    vipre internet security lifetime

  45. Some really superb info , Sword lily I found this. kinemaster download

  46. I really got into this article. I found it to be interesting and loaded with unique points of interest. I like to read material that makes me think. Thank you for writing this great content. how to download cotomovies

  47. Informative Site… Hello guys here are some links that contains information that you may find useful yourselves. It’s Worth Checking out…. how to hack dead target

  48. House Lawyers… [...]just below, are some totally unrelated sites to ours, however, they are definitely worth checking out[...]… Patreon Hack