You dirty RAT: Trend Micro spots new Asia-wide attack

Security researchers are warning of yet another advanced, large-scale attack campaign using sophisticated techniques to hide itself from its targets – organisations across Asia. Trend Micro has dubbed the campaign Naikon, based on the HTTP user-agent string “NOKIAN95/WEB” found in various targeted attacks across the region in …

[Anonymous Coward]

Insert free advert for Trend Micro ..

"Security researchers are warning of yet another advanced, large-scale attack campaign using sophisticated techniques to hide itself from its targets – organisations across Asia".

keywords: BKDR_RARSTONE, dynamic DNS domains, HTTP user-agent, malicious email attachment, NOKIAN95/WEB, sophisticated technique, spear-phishing emai, Trend Micro

[seczine.com]

Re: Insert free advert for Trend Micro ..

Happy to see it if it is providing truly useful information to the community....

[frank ly]

NOKIAN -> Naikon

Did they name it in this way to avoid embarassing Nokia?

[Anonymous Coward]

Similar backdoor

There's a whole forum on planting this on college campus laptops and switching on the webcams to perv and post images online

[Anonymous Coward]

Re: The malicious email attachment exploits CVE-2012-0158

Would be interesting to know when distribution of this malware actually begun.

CVE-2012-0158 (MS12-027) seems to have been patched since April 2012's patch Tuesday.

So...

[Fatman]

Your best defence.

<---- See icon.