ACAD/Medre.A a case study of an individual attack - SANS ...

More documents

Recommendations

Info

Payloads • ACAD/Medre.A will be sending the different AutoCAD drawings (and other information) that are opened by e-mail to a recipient with an e-mail account at the Chinese 163.com internet provider. It will try to do this using one of 22 other accounts at 163.com and one of 21 accounts at qq.com, another Chinese internet provider
Payloads
Page 1 and 2: ACAD/Medre.A a case study of an ind
Page 3 and 4: Outline Points to be discussed duri
Page 5 and 6: Introduction The latest trend is de
Page 7 and 8: W32/Georbot.A • … Political Mot
Page 9 and 10: ong before cloud computing gained t
Page 11 and 12: ACAD/Medre.A statistics
Page 13 and 14: Early history: • R14.01 (1999): A
Page 15 and 16: Dissecting the worm… • Written
Page 17: Infection and Installation .fas 1.
Page 21 and 22: Payload #2 (to qq.com) he actual dr
Page 23 and 24: Trying to stealing Foxmail Files
Page 25 and 26: Industrial Espionage?
Page 27 and 28: Upon discovery, ESET Contacted: •
Page 29 and 30: Upon discovery, ESET Contacted: •
Page 31 and 32: Tools Used… • LiveGrid • FAS
Page 33: Thank You! If you have Questions,I

ACAD/Medre.A a case study of an individual attack - SANS ...

Create successful ePaper yourself

Delete template?

Save as template?