Knowledge Base/Tibet & China Malware News

Spearphishing attacks against Tibet impersonate security vendor that raised alarm

Greg Walton
posted this on March 26, 2012 18:35

Spearphishing attacks against Tibet impersonate security vendor that raised alarm

 

Following detection of spearphishing attacks against Tibetan organisations, further attacks have been detected that claim to be from AlienVault.

The initial detection by AlienVault of spearphishing attacks from China was announced two weeks ago; the attacks contained a malicious PDF with a variant of Gh0st RAT (a remote-access Trojan) and exploited a known vulnerability in Microsoft.

 

[...]  http://www.scmagazineuk.com/spearphishing-attacks-against-tibet-imp...