View source for "NetTraveler is Running!" - Red Star APT attacks compromise high-profile victims

{{Publication
|Image=
|Legend=
|Document=
|Licence=
|Type=Blogpost
|Video=
|Link=http://securelist.com/blog/research/35936/nettraveler-is-running-red-star-apt-attacks-compromise-high-profile-victims/
|Author=GReAT, 
|NomRevue=Securelist
|Date=2013-06-04
|Editor=Kaspersky lab
|Year=2013
|ISBN=
|Page=
|Botnet=NetTraveler, 
|Malware=, 
|OffensiveTool=
|ExploitKit=, 
|Campaign=Red Star
|Campaign2=
|Campaign3=
|Campaign4=
|Campaign5=
|Service1=
|Service2=
|Service3=
|Service4=
|Service5=
|Vulnerability1=
|Vulnerability2=
|Vulnerability3=
|Vulnerability4=
|Vulnerability5=
|CCProtocol=, 
|Operation=, 
|Abstract=Over the last few years, we have been monitoring a cyber-espionage campaign that has successfully compromised more than 350 high profile victims in 40 countries. The main tool used by the threat actors during these attacks is NetTraveler, a malicious program used for covert computer surveillance.

The name NetTraveler comes from an internal string which is present in early versions of the malware: NetTraveler Is Running! This malware is used by APT actors for basic surveillance of their victims. Earliest known samples have a timestamp of 2005, although references exist indicating activity as early as 2004. The largest number of samples we observed were created between 2010 and 2013.
|Keyword=, 
}}