Subscribe / Unsubscribe Enewsletters | Login | Register

Pencil Banner

South Korea cyber attacks highlights the changing threat landscape

Nurdianah Md Nur | March 22, 2013
With more cyber attacks happening, Trend Micro urges enterprises to redefine their security strategy

With the increasing occurrence of cyber attacks, it is imperative for businesses to redefine their security strategy, notes Trend Micro Incorporated.

The leading global security company detected multiple cyber attacks on South Korean banking corporations and media agencies which recently paralysed their computer networks, therefore disrupting business operations, ATMs, online banking and TV broadcast.

This was how the attack happened:

  1. Spear-phishing emails were used to penetrate and compromise initial systems within the organisations
  2. Attackers hacked and loaded viruses onto public websites they suspect attractive targets will visit.
  3. Visitors to these compromised websites were then connected to offfshore websites where malicious Trojan program, known as TROJ_KILLMBR.SM, was installed.
  4. The Trojan program overwrites the Master Boot Record (MBR), which contains necessary information for any operating systems to boot correct, thus paralysing system and business operations.
  5. The MBR is wiped to makes investigation and recovery of these infected systems more difficult.

As two of Trend Micro’s threat discovery solutions detected and reported malicious traffic and messages sent to two of its customers, it was able to protect its customers from this attack.

For the last several years, Trend Micro has predicted a significant increase in cyber attacks, and has been working with its customers and partners in the region to provide custom defence.


Sign up for CIO Asia eNewsletters.