Number: IRCNE2015102669
Date: 2015/10/25
According to “computerworld”, South Korean organizations are being targeted in attacks with a new stealthy backdoor program that gives attackers full access to infected computers.
The malware has been dubbed Duuzer and while it's not exclusively used against targets in South Korea, it does seem that the hacker group behind it have a preference for that country's manufacturing industry, according to security firm Symantec.
Duuzer was designed to work on both 32-bit and 64-bit Windows versions and opens a back door through which attackers can gather system information; create, list and kill processes; access, modify and delete files; execute commands and more.
Once a computer is infected with Duuzer, the attackers will attempt to hide the malware by finding an existing application and mimicking it.
The Symantec researchers have found evidence that Duuzer is related to two other malware threats called Brambul and Joanap that have also been used in attacks against organizations from South Korea.
- 4