ACAD/Medre.A a case study of an individual attack - SANS ...

More documents

Recommendations

Info

Upon discovery, ESET Contacted: • AutoDesk • Chinese e-mail providers Further action taken… • Chinese National Virus Emergency Response Center • Peruvian organizations • Stand-alone cleaner available
Tools Used… • LiveGrid • FAS Decompiler • A piece of memory on hold for 20 years • Isolated network with SMPT server , AutoCAD system and another desktop • Web-browser • Communications • Compiler • And…
Page 1 and 2: ACAD/Medre.A a case study of an ind
Page 3 and 4: Outline Points to be discussed duri
Page 5 and 6: Introduction The latest trend is de
Page 7 and 8: W32/Georbot.A • … Political Mot
Page 9 and 10: ong before cloud computing gained t
Page 11 and 12: ACAD/Medre.A statistics
Page 13 and 14: Early history: • R14.01 (1999): A
Page 15 and 16: Dissecting the worm… • Written
Page 17 and 18: Infection and Installation .fas 1.
Page 19 and 20: Payloads
Page 21 and 22: Payload #2 (to qq.com) he actual dr
Page 23 and 24: Trying to stealing Foxmail Files
Page 25 and 26: Industrial Espionage?
Page 27 and 28: Upon discovery, ESET Contacted: •
Page 29: Upon discovery, ESET Contacted: •
Page 33: Thank You! If you have Questions,I

ACAD/Medre.A a case study of an individual attack - SANS ...

Create successful ePaper yourself

Delete template?

Save as template?