FBI: Wiper Malware Has Korean Language Packs, Hard Coded Targets

chicksdaddy sends news that the FBI has issued a warning to U.S. businesses over a "destructive" malware campaign using advanced tools. They don't name specific targets, but the information fits with the details from last week's attack on Sony Pictures, which led to the leak of several unreleased movies. A copy of the FBI's recent five-page FLASH alert reveals that the malware alleged to have wiped out systems at Sony Pictures Entertainment deployed a number of malicious modules, including a version of a commercial disk wiping tool on target systems. Samples of the malware obtained by the FBI were also found to contain configuration files created on systems configured with Korean language packs. The use of Korean could strengthen theories that the destructive cyber attacks have links to North Korea, though it is hardly conclusive. It does appear that the attack was targeted at a specific organization. The malware analyzed by the FBI contained a hard coded list of IP addresses and computer host names.

Comments

How

[fnj]

WTF, overwrites the MBR? What half assed OS does this attack? Windows?

Re:Malware? Sony?

[xxxJonBoyxxx]

>> Is the irony of Sony being hit by malware lost on people?

At Sony, we just call it "software."

Re:Corporate

[TechyImmigrant]

Who said Russian? I know an Israeli called Sergey.