summary
FBI ????Backdoor.Destover ????????????????????????????Destover ???????????????????????????????Destover ????????????????????? & ???????C&C???????????????????????????Trojan.Volgmer ???????????????????????C&C ?????????????????? 2 ?????????????????????????????
Volgmer ?????????????????????????? 1 ????????????????????????????????????????????????????????????????????????????Destover ? C&C ??????????????? Volgmer ?????????????????????????????????????????????????
???Destover ???2013 ???????????? Jokra ???????????????????????????????????????????????????????????????????????????????????????Shamoon ????????????????????????????????????????????????????????????????????????????????? Destover ??? Shamoon ???????????????
Destover ???
Destover ????????????????????????????????????????????????????FBI ?????????????????????????????????????? 1 ?? Destover ???????????????????
Destover ???? FBI ?????????????????????????????
- diskpartmg16.exe
- net_ver.dat
- igfxtrayex.exe
- iissvr.exe
???????????????????????? diskpartmg16.exe ????????????????net_ver.dat ??? igfxtrayex.exe ????????
?diskpartmg16.exe???????????? IP ?????????????? IP ???????????????USSDIX[???????]??????????????????????????? Destover ??????????????????????????????????????????????????????????
Destover ??????????? igfxtrayex.exe ?????????igfxtrayex.exe ?????????????????????????????
- ????????????????????????????????
- ?????????????????
- ????????iissvr.exe??????????
- ??? 8080 ? 8000 ???? IP ?????????
???Iissvr.exe ????? 80 ??????????????????????????????????????????????????
“We’ve already warned you, and this is just a beginning.
We continue till our request be met.
We’ve obtained all your internal data including your secrets and top secrets.
If you don’t obey us, we’ll release data shown below to the world.
Determine what will you do till November the 24th, 11:00 PM(GMT).
Post an email address and the following sentence on your twitter and facebook, and we’ll contact the email address.
Thanks a lot to God’sApstls [sic] contributing your great effort to peace of the world.
And even if you just try to seek out who we are, all of your data will be released at once.”
????????????????????????
??????????????????
????????????????????????????
??????????????????????????
11 ? 24 ??? 11 ??GMT??????????????
??????????????? Twitter ? Facebook ?????????????????????
???????????????? God’sApstls??????????????
?????????????????????????????????
Volgmer ??????
Destover ??????????????? Trojan.Volgmer ?????????????? C&C ?????????????????????????? Trojan.Volgmer ??????????Volgmer ????????????????????????????????C&C ??????????????????????????????????????????????????????????????????????
????????Destover ? C&C ????????? Volgmer ??????????????????????????????????????????????????
Jokra ??????
Destover ???????????????????????????????2013 ???????????? Jokra ???????????Jokra ????????????????????????????????? Web ?????????????
Jokra ????????????????????????????????????????????????????????????Destover ??????????????????????????????????????????????2 ????????????????????????????????????????
Shamoon ???????
???Destover ???Shamoon ????????????????Destover ? Shamoon ????????????????????W32.Disttrack??????????????????????????????????????????????????Destover ? Disttrack ??????????????????????????????????????????????????
???????????
???????????????????????? Backdoor.Destover ?????????
* ??????????????????? RSS ????????????http://www.symantec.com/connect/ja/item-feeds/blog/2261/feed/all/ja ????????????