[Trend]Summary of March 20 Korea MBR Wiper

[igor51]

Summary of March 20 Korea MBR Wiper

Our investigation and analysis of last week’s MBR wiper attacks in South Korea is still ongoing. This post summarizes our results and available protection. The MBR wiper arrives as a dropper file (detected as TROJ_KILLMBR.SM), which drops four files onto the system: Agentbase.exe ?the actual MBR wiper, also detected as TROJ_KILLMBR.SM ~pr1.tmp ? a UNIX [...]

Post from: Trendlabs Security Intelligence Blog - by Trend Micro

Summary of March 20 Korea MBR Wiper

Source: Summary of March 20 Korea MBR Wiper