View source for Targeted information stealing attacks in South Asia use email, signed binaries

{{Publication
|Type=Blogpost
|Link=http://www.welivesecurity.com/2013/05/16/targeted-threat-pakistan-india/ www.welivesecurity.com
|Author=Jean-Ian Boutin
|NomRevue=We Live Security
|Date=2013-05-16
|Editor=ESET
|Year=2013
|Botnet=HangOver
|Abstract=In the past few months, we have analyzed a targeted campaign that tries to steal sensitive information from different organizations throughout the world, but particularly in Pakistan. During the course of our investigations we uncovered several leads that indicate this threat has its origin in India and has been going on for at least two years. The journey began with a code-signing certificate and an exploit and the scope of the investigation has widened ever since. In this blog post, we will highlight several interesting artifacts of the campaign, but more will be revealed in my upcoming presentation at the 7th International CARO Workshop in mid-May.
}}