View source for Shamoon the wiper - copycats at work

{{Publication
|Image=
|Legend=
|Document=
|Licence=
|Video=
|Link=https://www.securelist.com/en/blog?weblogid=208193786
|Author=GReAT, 
|NomRevue=Securelist
|Date=16 aug2012
|Editor=Kaspersky lab
|Year=2012
|ISBN=
|Page=
|Abstract=Our opinion, based on researching several systems attacked by the original Wiper, is that it is not. The original “Wiper” was using certain service names (“RAHD...”) together with specific filenames for its drivers (“%temp%\~dxxx.tmp”) which do not appear to be present in this malware. Additionally, the original Wiper was using a certain pattern to wipe disks which again is not used by this malware.
|Botnet=Shamoon, EraseMBR, 
|Malware=, 
|ExploitKit=, 
|CCProtocol=, 
|Operation=, 
|Keyword=, 
}}