
2. Spreading path and symptom of infection
[Warning] Detected APT attack for Korean famous web portal site (#Update 02)
http://en-erteam.nprotect.com/2012/07/warning-detected-apt-attack-for-korean.html
http://en-erteam.nprotect.com/2012/07/warning-detected-apt-attack-for-korean.html
Attacker used simple form of e-mail. Its title is "Application" and its body contains only password.
To heighten attack success rate, attackers have used social engineering technique for getting attractions, however; attacks aiming for global is difficult due to each language and technical preparation. But, security can be easily broken by simple attack.
E-mail used on attack is as following.
Attacker used sina.com's account and receiver's mail address is from France Ministry of Foreign Affairs.
Attached "New Microsoft excel table.xls" has been used several time on various attacks.
If a user downloads and executes attachment "New Microsoft excel table.xls", following password requirement window can be shown and inputting "8861" on its mail can infect user's PC by malicious file.
Other cases, infecting malicious files on executing with using document file's security exploit, are also reported. This makes temp folder and abnormal file. In this case, user is already infected by malicious files.
To input password and press OK, it creates "set.xls" on temp folder. At the same time, it creates "ews.exe" and executes.
"ews.exe" creates its clone on following path for disguising as a Internet Explorer installation file.
C:\Document and Settings\[User Account Name]\Application Data\iexplore.exe
When this malicious file executes, it creates "keybyd.dat" working as keylogger and tries to access on certain host(lixht.gnway.net) in Hong Kong. Besides, alg.exe uses TCP 21(FTP) port and 23(Telnet) port for leaking user personal information.
3. Summary
Attacking case aiming at officials for government organization can snatch confidential information. In case of exposed by this kind of malicious files, attacker can collect internal information and various attacks. To use PC safely from security threats of these malicious attachments, we recommend you download latest security updates and obey following "Security management tips" for general users.
Security management
tips
1. Maintain the latest security update on OS and applications
2. Use anti-virus SW from believable security company and keep updating the latest engine and using real time detecting function
3. Do not see and download attached file from suspicious e-mail.
4. Keep caution to link from instant messenger and SNS.
1. Maintain the latest security update on OS and applications
2. Use anti-virus SW from believable security company and keep updating the latest engine and using real time detecting function
3. Do not see and download attached file from suspicious e-mail.
4. Keep caution to link from instant messenger and SNS.
INCA Internet (Security Response Center / Emergency Response Team) runs responding system against various security threats.
nProtect Anti-Virus/Spyware v3.0 diagnoses and treats various variant files.
Free installation link of nProtect AVS : http://avs.nprotect.com/
Just like every year, Apple is all set to release their brand new operating system iOS 11 in June during the WWDC 2017 event. Check this website to know everything about the upcoming operating system. iOS 11 Download
ReplyDeleteWow, this is very interesting article. Thanks, guys!
ReplyDeleteYou've probably heard about essay writing services that will give their best in order to meet your requirements about the essay or another kind of academic paper. Well, here we have StudyBay.com – a platform that differs from essay writing services. In this post, I want to share my StudyBay review. If you want to find info about “studybay reddit”, welcome to Scamfighter.
ReplyDeleteOver 50% of pharmacy school applicants do not get accepted into the programs of their choice. Most of these applicants have excellent scores on entrance exams, as well as an admirable undergraduate grade point average. However, grades are not all there is to the application process. Recommendations from professors and practicing pharmacists play a large part in the overall picture. In the end, however, it is the personal statement that makes you or breaks you. Pharmacy school admission committee members do not want to fill precious spots with mediocre candidates. Instead, they want to place candidates that will excel in this profession, and that success involves perseverance and dedication. Click personal essays for pharmacy school for detailed information.
ReplyDeletePaper writing sites have become quite numerous in the internet. Most probably you have seen their advertisement when just browsing Internet. However, to be sure that you will get quality writing paper assistance it is necessary to be careful when choosing a company or an individual, who will write your paper. Best websites that write papers for you have a decent history, good reviews, clear order form and pricing, different specialists for different disciplines, they are opened and communicative and won’t let your questions and requests just hang in the air.
ReplyDeleteIf you need help writing paper, on our site you will find the best easy paper writing websites rating. These sites have experienced and well-educated authors who will write my papers for me online in the best way in in the shortest time. You can also find authors for serious and time-consuming papers and work in close cooperation with them to keep track on the process and to help them custom the essay to your individual needs. Companies, where you can order paper online to write on can have different specialization, so you might need to choose them based on the discipline you need to write a paper online.
Hello everyone, was interesting to read your article. Usually i'm reading New York Times , but now i will read you too!
ReplyDeleteIt's good that you structure the information in the article and very clearly formulate the data which you can easily use further.
ReplyDeleteThanks for sharing, nice post! Post really provice useful information!
ReplyDeleteGiaonhan247 chuyên dịch vụ mua hộ hàng hàn quốc và dịch vụ order hàng hàn quốc giá rẻ cũng như vận chuyển hàng trung quốc về việt nam giá rẻ hay dịch vụ order hàng đức và ship hàng đức về VN uy tín, hay dịch vụ mua hàng trên amazon nhật bản cũng như bảng giá gửi hàng đi mỹ uy tín.
This is a great little post with some valuable tips. I totally agree. The way you bring passion and engagement into the things you do can really change your outlook on live.
ReplyDeleteIt is a nice post. clash royale mod apk hungry shark evolution mod apk my talking angela mod apk
ReplyDeleteVery good, I think I found the knowledge I needed. I will see and refer some information in your post. thank your post
ReplyDeleteI am always excited to read your posts. This one is really interesting! What do you think about this situation?
ReplyDeleteKineMaster apk
ReplyDeleteFree fire apk
KineMaster for mac
Free fire for mac
The article you have shared here very awesome. I really like and appreciated your work. I read deeply your article, the points you have mentioned in this article are useful
ReplyDeleteraze 3
It's really helpful for me. I need to share this post for my fellow. She needs it torrent sites
ReplyDeleteافضل أما الخدمة التي سنتحدث عنها الآن هي من أهم الخدمات التي تتشرف شركة تنظيف قصور بالرياض http://tiny.cc/6sph5y بتقديمها لعملائها ,وهي تنظيف مجالس سواء في المنازل أو الشقق أو الفلل او القصزر
ReplyDeleteلأننا جميعاً نعرف أهمية اجتماعات العائلة في هذه المجالس التي تميز نا عن غيرنا من البلاد والدول ,فلابد أن تكون هذه المنازل على قدر عالي من النظافة والجمال والذي لابد وأن يتناسب مع أهمية المدعوين لهذه المجالس ,حتى يستمتع عملائنا باجتماعاتهم العائلية في جو نظيف وهادئ ومريح يليق بهم… اقرأ المزيد
المصدر: شركة تنظيف قصور بالرياض
شركة تنظيف كنب بالرياض http://tiny.cc/oxph5y عند تجمع الأتربة على أقمشة الكنب أو اتساخها بالبقع التي يصعب إزالتها فإن ذلك يبعث على النفس نوعا من الانزعاج ,و عدم الراحة خاصة مع هبوب العواصف الرملية و تجمع الأتربة الأمر الذي يزيد المشكلة تفاقما ويزيد النتائج سوء .
من أهم الخدمات التي تقدمها هي تنظيف السجاد والذي هو من أهم القطع التي يحتوي عليها أي منزل ,وهي ما تقوم بإظهار جمال كل قطع الأثاث في المنزل.
وفي حالة ما كان هذا السجاد مستخ أو به أي بقع أو شوائب سيفسد كافة المنظر حتى إذا كان المنزل بأكمله نظيف.
فتقوم شركتنا بتنظيف السجاد باستخدام مجموعة من المساحيق والأدوات العالية الجودة للحفاظ على هذا السجاد من التلف وإعادته نظيفاً وجديداً مره أخرى
تتخصص في تنظيف الكنب مع جميع أنواع أقمشته تنظيفا تاما وأرجعاها جديدة كأول مرة قد اشتريته مع الحفاظ على كافة أنواع المنسوجات التي تتخلل الكنبة و ما تحتويه من ألوان و رسومات كل ذلك تقدمه الشركة وبأسعار في متناول يد العميل بإذن الله .
يمكنك الاعتماد علينا في إتمام عملية التنظيف و على أعلى مستوى ان شاء الله لما تتمتع به الشركة من خبرة طويلة ورضاء لكل عملائها الكرام … اقرأ المزيد
المصدر: شركة تنظيف كنب بالرياض جميع الاحياء
معلومات تفصيليه عن الصراصير ؟
افضل شركة مكافحة الصراصير بالرياض http://tiny.cc/ltph5y تعد الصراصير من الحشرات المنزليه المقززة التى يخشاها الكثير من الأفراد ؛ولها أشكال وأحجام مختلفه ؛فالصراصير لديها ألوان سوداء أو البنى القامت ولديها شعيرات فى الوجه ؛وتتمكن من الوصول الى الأطعمة الخاصه بها عبر مجموعه من قرون الاستشعار التى تساعدها على الاستدلال على أماكن الأطعمة ؛فقط نحن شركة مكافحة حشرات بالرياض .
تعيش الصراصير فى الجحور أو المستعمرات والمسامات الواسعه التى تتواجد أسفل الحوائط وفى الركنيات ؛وتتمكن الصراصير من نشر الطفيليات والشوائب فى المكان نظرا لأنها تنتج روثا اسود اللون فى أماكن تواجدها ؛وتتغذى على كل ما يقابلها من بقايا أطعمة أو ورق وغيرها من الأمور الأخرى ؛وتخرج من تلك الجحور صيفا للبحث عن الأطعمة وتفضل التواجد فى الأماكن الرطبة التى تمتلأ بالمياه وحول الصنابير ؛ومن المعروف أن هناك أنواعا مختلف من الصراصير لا يمكن القضاء عليها بسهوله سواء الصراصير الألمانيه أو الاستراليه أو الأمريكية أيضا.… اقرأ المزيد
المصدر: افضل شركة مكافحة الصراصير بالرياض
That is really good to know. thanks for sharing this information with us.
ReplyDeleteThis is a great inspiring article.I am pretty much pleased with your good work.You put really very helpful information. Keep it up. Keep blogging. Looking to reading your next post. Click to visit game. sims 4 cheats
ReplyDeleteif you having trouble to log in your alro account then don't you worry go to arlo netgear camera
ReplyDeleteto solve your problem regarding arlo login or any kind of issue related to arlo camera.
A perfect game to test your brain. 110 questions from easy to hard in the impossible quiz
ReplyDeleteThanks a lot for sharing the content. Really a nice blog and great kind of information is provided by you. We provide quickbooks support phone number +1-800-901-6679.
ReplyDeletewww.ninonurmadi.com
ReplyDeletelampung
lampung
lampung
lampung
lampung
lampung
lampung
lampung
Every student has the chance of enjoying our affordable research papers. The writers hired at the company are professionals with significant experience. You can also buy pre written essays today!
ReplyDeleteOur experienced and high-quality research paper services will ensure when you search for best research paper writing services in USA and cheap dissertation writing services based on your instructions and specifications you get the assistance you need.
ReplyDeletewww.ninonurmadi.com
ReplyDeletewww.ninonurmadi.com
www.ninonurmadi.com
www.ninonurmadi.com
www.ninonurmadi.com
www.ninonurmadi.com
www.ninonurmadi.com
www.ninonurmadi.com
Arlo Support for Arlo Camera Setup Issues, Log In, Connection Issues, Multiple Devices Setup, Login Issues etc. Quick Fix for common issues. Call now at +1-844-456-4180 Toll Free Number for Arlo Support
ReplyDeletehttps://arlologin-page.com/
https://acmarket.xyz/
ReplyDeleteAc market
Ac market apk
Ac market download
Ac market ios
QuickBooks Customer Service is available round the clock to resolve accounting problems. Reach experts at QuickBooks Customer Service Number and get instant help.
ReplyDeleteHey! Lovely post. I am a big fan of your work. I really like your website. Undoubtedly QuickBooks is one of the most appealing accounting software. You can easily use and install this software for your business. You can even get best technical help at
ReplyDeleteQuickBooks Customer Service 1-800-329-0391.
Visit here : https://www.qbsupportcustomerservice.com/
Togel singapura hari ini : http://209.97.174.116
ReplyDeletetermasuk rekomendasi bandar togel :
situstogelonline.pagexl.com
Gmail Account Login Problems
ReplyDeleteChange Gmail Password
Hack Gmail Account Recovery
G Suite Support Number
Gmail Business Account Help
Cash App Customer Service
Comcast Email Support
Comcast Customer Service
We are one of the third party which provide best in class support for all kind of Xbox Game studio, Xbox Live, Xbox installation, updation and much more related issues over phone call and chat across the USA 24*7. We have a dedicated team of professionals who are well certified and experience to handle all kind of Xbox issues. We ensure each and every customer to get full satisfaction for his concern. You just need to dial up our Xbox customer support service number 1-800-382-3046.
ReplyDeleteXbox Customer Service Number
Xbox Support Phone Number
Xbox Toll Free Number
Xbox Customer Care Number
Xbox Helpline Number
Hi I am John Smith
ReplyDeleteI am a Software developer in United states of america if are You looking for software installation help or other support then you can contact with me. Visit my websites Thanks
Bitdefender Login | mcafee.com/activate | my.avast.com | AOL Mail | TomTom Home
It is amazing post, i am really impressed of your post. Its really useful. Thank you for sharing this article.
ReplyDeleteavast login
office.com/setup
Rand McNally Update
bandar togel online :
ReplyDeletehttp://165.22.110.188
http://165.22.110.188
http://165.22.110.188
http://165.22.110.188
http://165.22.110.188
http://165.22.110.188
Roadrunner Email - Login TWC Email Get instant customer support for Roadrunner Login through technical experts. We're here to help
ReplyDeleteRoadrunner Email
TWC Email
Roadrunner Email
Roadrunner Login
Roadrunner Email
Roadrunner Email
mail.aol.com - Now Login to your Aol Mail Account at id.aol.com and also do Aol Mail Login, Create an Aol Account, AOL Password Reset etc Here.
ReplyDeletemail.aol.com
AOL Mail
mail.aol.com
AOL Mail Login
mail.aol.com
mail.aol.com
Magellan Roadmate Update - Update Your Magellan Roadmate Maps and Software on Your Device using the Magellan Roadmate. Update Your Magellan Maps Here.
ReplyDeleteMagellan Roadmate Update
Magellan Update
Magellan Roadmate Update
Magellan GPS Update
Magellan Roadmate Update
Magellan Roadmate Update
Thank you for sharing a valuable piece of content. I know Netgear support phone number call at +1-844-456-4180. No queue Direct Human contact No Waiting and it's Free!
ReplyDeleteingin mendapatkan prediksi togel singapura yang jitu dan akurat klik aja link tersebut
ReplyDeleteMembutuhkan Inspirasi angka togel silahkan kunjungi website : http://45.32.105.226/
ReplyDeletepictures are from The best things that express the decorations also in the place and that help distinguish the Council from any other Council these tips for you because you cleaning company councils in Riyadh always strive to get the best ideal ways distinctive to its
ReplyDeleteشركة تنظيف شقق بالرياض اسعار
شركة تنظيف شقق بالرياض حراج
شركات تنظيف شقق بالرياض
شركة تنظيف الشقق بالرياض
شركات تنظيف الشقق بالرياض
شركة تنظيف منازل بالرياض
شركة تنظيف منازل بالرياض عمالة فلبينية
شركة تنظيف شقق الرياض
شركة تنظيف الشقق الرياض
شركه تنظيف شقق وفلل بالرياض
togelturbo
ReplyDeletetogelturbo
togelturbo
togelturbo
togelturbo
Result sydney :
ReplyDeletehttp://45.32.105.226
http://45.32.105.226
http://45.32.105.226
http://45.32.105.226
http://45.32.105.226
prediksi bola jitu :
ReplyDeletehttp://167.71.211.138/
http://167.71.211.138/
http://167.71.211.138/
http://167.71.211.138/
http://167.71.211.138/
http://167.71.211.138/
This is also a very good post which I really enjoyed reading. It is not everyday that I have the possibility to see something like this.
ReplyDeletehttp://bit.ly/2AEqTlS
https://github.com/rajasakong88
ReplyDeletehttps://github.com/rajasakong88
https://github.com/rajasakong88
https://github.com/rajasakong88
https://github.com/rajasakong88