Nepalese government websites compromised to serve Zegost RAT
(Publication) Google search: [1]
| Nepalese government websites compromised to serve Zegost RAT | |
|---|---|
| Botnet | Zegost |
| Malware | |
| Botnet/malware group | |
| Exploit kits | |
| Services | |
| Feature | |
| Distribution vector | |
| Target | |
| Origin | |
| Campaign | |
| Operation/Working group | |
| Vulnerability | |
| CCProtocol | |
| Date | 2012 / 08 août 2012 |
| Editor/Conference | Websense |
| Link | http://community.websense.com/blogs/securitylabs/archive/2012/08/08/nepalese-government-websites-compromised-to-serve-zegost-backdoor.aspx community.websense.com (community.websense.com Archive copy) |
| Author | Gianluca Giuliani, Elad Sharf |
| Type | |
Abstract
“ The Websense® ThreatSeeker® Network has detected that two Nepalese government websites, the National Information Technology Center (NITC) and the Office of the Prime Minister and Council Minister (nitc.gov.np and opmcm.gov.np respectively), have been compromised and injected with malicious code that tries to exploit the Java vulnerability CVE-2012-0507. The aim of this injection is to install, through successfully exploiting that Java weakness, a backdoor that is also dubbed "Zegost" on the systems of visitors to these websites.
Bibtex
@misc{Giuliani2012BFR1109,
editor = {Websense},
author = {Gianluca Giuliani, Elad Sharf},
title = {Nepalese government websites compromised to serve Zegost RAT},
date = {Error: Invalid time.},
month = Error: Invalid time.,
year = {2012},
howpublished = {\url{http://community.websense.com/blogs/securitylabs/archive/2012/08/08/nepalese-government-websites-compromised-to-serve-zegost-backdoor.aspx community.websense.com}},
}