Internet Explorer hackers use same tools as Bit9 attack

snoopy · Sep 29, 2013

Internet Explorer hackers use same tools as Bit9 attack
Sep 28, 2013 12:25 PM

A criminal group exploiting the recently discovered Internet Explorer browser zero-day vulnerability has been linked to the Chinese hackers who compromised the Bit9 security platform earlier this year.

The connection between the two groups is in the command and control infrastructure used, says security vendor FireEye. Within the two infrastructures were similar malware, IP addresses, and email addresses used to register domains.

The latest attack, which FireEye has dubbed Operation DeputyDog, appears to target manufacturers, government entities and media organizations in Japan, said Darien Kindlund, manager of FireEye Threat Intelligence. The group hid IE exploits on three Japanese news sites, hoping to compromise visitors' PCs.

The compromised sites recorded more than 75,000 page views before the exploits were discovered. The attackers apparently were casting a wide net in looking for systems belonging to the desired targets. The exploit would have worked on all versions of IE, starting with IE 6.

"Maybe only a fraction of those compromised systems are really their true intended targets," Kindlund said. "The others are considered collateral damage."
Click to expand...

continued here: http://www.pcworld.com/article/2050495/internet-explorer-hackers-use-same-tools-as-bit9-attack.html

Log in or Sign up

Internet Explorer hackers use same tools as Bit9 attack

snoopy Registered Members

Share This Page

Log in or Sign up

Internet Explorer hackers use same tools as Bit9 attack

snoopy Registered Members

Share This Page

Useful Searches