Difference between revisions of "The mystery of Duqu: part two"
Jump to navigation
Jump to search
m (Remplacement de texte — « |Editor=Kaspersky lab Lab » par « |Editor=Kaspersky lab ») |
m (1 revision imported) |
Revision as of 16:23, 7 February 2015
(Publication) Google search: [1]
| The mystery of Duqu: part two | |
|---|---|
| |
| Botnet | Duqu |
| Malware | Duqu (bot) |
| Botnet/malware group | |
| Exploit kits | |
| Services | |
| Feature | |
| Distribution vector | |
| Target | |
| Origin | |
| Campaign | |
| Operation/Working group | |
| Vulnerability | |
| CCProtocol | |
| Date | 2011 / 25 octobre 2011 |
| Editor/Conference | Kaspersky lab |
| Link | http://www.securelist.com/en/blog/208193197/The Mystery of Duqu Part Two www.securelist.com (www.securelist.com Archive copy) |
| Author | Alexander Gostev |
| Type | |
Abstract
“ Our investigation and research of Duqu malware continues. In our previous report, we made two points:
- there are more drivers than it was previously thought;
- it is possible that there are additional modules.
Besides those key points, we concluded that unlike the massive Stuxnet infections, Duqu attacks are limited to an extremely small number of targets.
Bibtex
@misc{Lua error: Cannot create process: proc_open(/dev/null): failed to open stream: Operation not permitted2011BFR931,
editor = {Kaspersky lab},
author = {Alexander Gostev},
title = {The mystery of Duqu: part two},
date = {Error: Invalid time.},
month = Error: Invalid time.,
year = {2011},
howpublished = {\url{http://www.securelist.com/en/blog/208193197/The_Mystery_of_Duqu_Part_Two www.securelist.com}},
}