Summary of March 20 Korea MBR Wiper
Our investigation and analysis of last week’s MBR wiper attacks in South Korea is still ongoing. This post summarizes our results and available protection. The MBR wiper arrives as a dropper file (detected as TROJ_KILLMBR.SM), which drops four files onto the system: Agentbase.exe ?the actual MBR wiper, also detected as TROJ_KILLMBR.SM ~pr1.tmp ? a UNIX [...]Post from: Trendlabs Security Intelligence Blog - by Trend Micro
Summary of March 20 Korea MBR Wiper
Source: Summary of March 20 Korea MBR Wiper (http://feeds.trendmicro.com/~r/Anti-MalwareBlog/~3/Z55d0_Voc5g/)