Olympic Destroyer | Malware attacks Winter Olympics

Описание: The 2018 Pyeongchang Olympics were hit by a wiper malware. The latest information suggests that the threat was created by Russian spies who tried to pin it on North Korea. The malware itself uses vssadmin and resembles ransomware in many ways. However, there is no encryption, ransom message. It is purely destructive and attempts to disrupt events by shutting down services, stealing system credentials, taking down the site which is carried out by various modules extracted from the master executable.

Colin's video:
   • Olympic Destroyer - Quick behavioural Anal...  

Analysis by Cisco Talos:
http://blog.talosintelligence.com/201...

-------------------------------------------

Want regular updates when new malware is discovered? Follow me on Twitter:   / leotpsc  

Do you enjoy the content on this channel? YouTube ad revenue is virtually non-existent so please consider funding TPSC via Patreon:
  / tpsc