6 ? 5 ??Kaspersky ???The NeTTraveler (aka 'TravNeT')??????????????????????????????????????????????????????????????????????????????????????????????Travnet Trojan Could Be Part of APT Campaign?Travnet Trojan ? APT ??????????????? McAfee ?????????????????????????????????????????????? 3 ????????????????????????????????????????????????
?????? IPS ???????????
- System Infected: Trojan.Travnet
- Web Attack: Microsoft Common Controls CVE-2012-0158
- Attack: MS Office Word RTF Exploit CVE-2010-3333
????????????????????????????????????????????????RTF??????????????????? RTF ??????????????????Microsoft Windows ?????????? ActiveX ?????????????????????????CVE-2012-0158?? Microsoft Office ? RTF ?????????????????????????????CVE-2010-3333????????? Microsoft Office ??? Microsoft ?????????????????????????????????Microsoft Word ??????????????????????????? Trojan.Mdropper ??????????
???????????????????????????????????????????????????????????????? & ???????C&C??????????????????????????????????? Word ??? Trojan.Mdropper ?????????????? Trojan.Travnet ?????????
?????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????
* ??????????????????? RSS ????????????http://www.symantec.com/connect/ja/item-feeds/blog/2261/feed/all/ja ????????????