Security-X

Forum Security-X => News => Discussion démarrée par: SX-News le mai 22, 2013, 19:56:11

Titre: [fsecure] Big Hangover
Posté par: SX-News le mai 22, 2013, 19:56:11
Big Hangover

Description :  The Mac spyware discovered at the Oslo Freedom Forum (http://"http://www.f-secure.com/weblog/archives/00002554.html") last week is apparently connected to larger espionage efforts — and those efforts look to be connected to India.

Yesterday, the folks from Norman released their Hangover Report (http://"http://blogs.norman.com/2013/security-research/the-hangover-report").

<blockquote class="twitter-tweet"]HANGOVER REPORT (tot.114pg): Indian APT group hacked Telenor, others; related to the MacOS trojans found at OFF blogs.norman.com/2013/security-… (http://"http://t.co/ogWy1AHfvl" title="http://blogs.norman.com/2013/security-research/the-hangover-report")&mdash; Snorre Fagerland (@SnorreFagerland) May 20, 2013 (http://"https://twitter.com/SnorreFagerland/status/336331551010877442")


Snorre Fagerland (http://"https://twitter.com/SnorreFagerland/status/336331551010877442") has confirmed a connection to the C&amp;Cs used by Backdoor:OSX/KitM.A.

Also related, from the folks at ESET: Targeted information stealing attacks in South Asia use email, signed binaries (http://"http://www.welivesecurity.com/2013/05/16/targeted-threat-pakistan-india/")

Apple has reportedly revoked the Developer ID used by KitM.A.  On 21/05/13 At 01:35 PM

Lien : http://www.f-secure.com/weblog/archives/00002557.html