Attackers distribute malware through sites such manufacturers industri lwa le systems

Malwaremakers that focused on the industri lwa le systems have their rogue software is distributed through the sites of the creators of those systems. That discovered security company F-Secure. The malware, a backdoor on the affected systems.

According to F-Secure point out the multiple elements in the source code of the software on it that is the malware name Havex bears. F-Secure knew communication with the command-and-control servers to intercept, and Havex proved only to communicate with infected systems with the makers or users of industrial systems, mainly in Europe.

The malware creators infecteerden installation files on the sites of the manufacturers with the malware; when users of the industrial systems, the software installed, they were also the malware included. That writes F-Secure. They knew the setup files from three manufacturers, located in Belgium, Switzerland and Germany, to infect; which companies exactly are, remains unmentioned. Two of the manufacturers provided control software for industrial systems; the third makes precision industrial cameras. Apart from that dispersed the attackers and their malware via e-mail and so-called exploit kits.

Once the software is infected, more software download. Also is the internal network scanning, which specifically looks for systems that are used for the control of industrial systems. Also can the attackers through a backdoor to access the system. According to F-Secure points out that there is that it comes to industrial espionage, though it is unclear where the malware exactly is used.

Comments
(25)