Olympic Destroyer | Malware attacks Winter Olympics
iSpeech
The 2018 Pyeongchang Olympics were hit by a wiper malware. The latest information suggests that the threat was created by Russian spies who tried to pin it on North Korea. The malware itself uses vssadmin and resembles ransomware in many ways. However, there is no encryption, ransom message. It is purely destructive and attempts to disrupt events by shutting down services, stealing system credentials, taking down the site which is carried out by various modules extracted from the master executable.
Colin's video:
Analysis by Cisco Talos:
http://blog.talosintelligence.com/2018/02/olympic-destroyer.html#more
-------------------------------------------
Want regular updates when new malware is discovered? Follow me on Twitter: https://twitter.com/leotpsc
Do you enjoy the content on this channel? YouTube ad revenue is virtually non-existent so please consider funding TPSC via Patreon:
https://www.patreon.com/tpsc
2018-02-26 08:38:45
source
Gloss