Evidence of advanced persistent threat: A case study of malware for political espionage

Proceedings of the 2011 6th International Conference on Malicious and Unwanted Software, Malware 2011

Volumn , Issue , 2011, Pages 102-109

  Li, Frankie ^a   Lai, Anthony ^a   Ddl, Ddl ^a  

^a Valkyrie X Security Research Group   (Hong Kong)

Author keywords

[No Author keywords available]

Indexed keywords

ANTI-VIRUS PROGRAMS; COMMAND AND CONTROL; CYBER-ATTACKS; FILE EXTENSION; HONG-KONG; INSTANT MESSAGING; MALWARES; SCREEN CAPTURE;

ELECTRONIC MAIL; RAT CONTROL; VIRUSES;

COMPUTER CRIME;

EID: 84855859636     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/MALWARE.2011.6112333     Document Type: Conference Paper

References (11)

1. Alperovitch D., (2011). Revealed: Operation Shady RAT.
2. Andress J., (2011). Advanced Persistent Threat, Attacker Sophistication Continues to Grow? ISSA Journal
3. Cloppert M., (2009, July 22). Security Intelligence: Introduction (pt 1) (2009), Computer Forensics Blog, SANS.org. Retrieved on Aug 4 from http://computer-forensics.sans.org/blog/2009/07/22/security-intelligence- introduction-pt-1
4. Mandiant. (2010). M Trends, the Advanced Persistent Threat.
5. Operation Aurora (n.d.). Wikipedia. Retrieved on Aug 12 from http://en.wikipedia.org/wiki/Operation-Aurora
6. Zeltser, L. (2007). Reverse Engineering Malware: Tools and Techniques Hanks -On. Bethesda: SANS Institute.
7. Brand M., Valli C. & Woodward A., (2010). Malware Forensics: Discovery of the Intend of Deception. Edith Cowan University, Australian Digital Forensics Conference
8. Valli C., Brand M., (2008). The Malware Analysis Body of Knowledge (MABOK), Edith Cowan University, School of Computer and Information Science
9. The SecDev Group. (2009). Tracking GhostNet: nvestigating a Cyber Espionage Nework.
10. Bindiff version 2.3 software from Zynamics (www.zynamics.com)
11. Combs G., Wireshark version 1.2.2 software from Wireshark (www.wireshark.org)