www.unuudur.com » Surprise! North Korea’s official news site delivers malware, too

Surprise! North Korea’s official news site delivers malware, too

[Нийтэлсэн: 15:55 14.01.2015 ]

www.arstechnica.com

A security researcher examining the website of North Korea’s official news service, the Korean Central News Agency, has discovered that the site delivers more than just the latest photo spread of Democratic Peoples’ Republic of Korea leader Kim Jong Un inspecting mushroom farms. There’s a little extra surprise hidden in the site’s code—malware. The news site appears to double as a way for North Korea to deliver a “watering hole” attack against individuals who want to keep tabs on the “activities” of the DPRK’s dear leader.

Ars has independently verified a reference within part of the site’s JavaScript code called from the home page to a download named “FlashPlayer10.zip.” The file, which is set as a JavaScript variable “FlashPlayer” on the site’s main page and on other site pages, contains two files labeled as Windows executable installers containing updates for the long-since obsolete Flash Player 10—one for an alleged ActiveX control, and the other for a browser plug in. Both are identical files, and they contain a well-known Windows malware dropper, based on an analysis through the malware screening site Virustotal.

by Sean Gallagher



Шинээр

Mongolia’s Oyu Tolgoi declares force majeure after border protests
[Нийтэлсэн: 19.01.2018 ]
[Эх сурвалж: ]
Copper falls most in six weeks as metals rally starts to give
[Нийтэлсэн: 17.01.2018 ]
[Эх сурвалж: ]
EU to remove Panama, Korea, UAE, 5 others from tax haven blacklist
[Нийтэлсэн: 17.01.2018 ]
[Эх сурвалж: ]
A Rutgers professor won one of Mongolia’s highest awards
[Нийтэлсэн: 05.01.2018 ]
[Эх сурвалж: ]
Mongolia delays launch of $500-million airport until 2019
[Нийтэлсэн: 05.01.2018 ]
[Эх сурвалж: ]
Copper rallies to three-year high as China plant halts output
[Нийтэлсэн: 02.01.2018 ]
[Эх сурвалж: ]
Copper price powers on
[Нийтэлсэн: 25.12.2017 ]
[Эх сурвалж: ]
Massive Oyu Tolgoi mine to more than double gold production in 2018
[Нийтэлсэн: 12.12.2017 ]
[Эх сурвалж: ]

Get Flash to see this player.