Eric.freyssinet: 1 revision imported

2015-02-07T14:29:43Z

1 revision imported

← Older revision		Revision as of 14:29, 7 February 2015
(No difference)

Eric.freyssinet at 17:38, 27 February 2013

2013-02-27T17:38:13Z

New page

{{Publication
|Type=Blogpost
|Link=http://blog.crysys.hu/2013/02/miniduke/ blog.crysys.hu
|NomRevue=CrySyS Blog
|Date=2013-02-27
|Editor=CrySyS Lab
|Year=2013
|Botnet=MiniDuke
|Abstract=Earlier in February 2013, FireEye announced the discovery of a new malware that exploited a 0-day vulnerability in Adobe Reader. Now, we announce another, as yet unknown malware that exploits the same Adobe Reader vulnerability (CVE-2013-0640).

This new malware was named Miniduke by Kaspersky Labs with whom we carried out its first analysis. Our participation in this research was justified by a detected Hungarian incident. A detailed report on the results of our joint efforts has been published by Kaspersky Labs on their Securelist blog site. That report describes what we currently know about the operation of Miniduke including its stages, and also information on the C&C infrastructure and communications. We have published another report from CrySys Lab that contains information on the indicators of Miniduke infections and gives specific hints on its detection. This blog entry is a brief excerpt of our report.
}}

Miniduke - Revision history

Eric.freyssinet: 1 revision imported

Eric.freyssinet at 17:38, 27 February 2013