- Jan 8, 2011
- 22,361
During the spring, attackers began distributing new versions of a remote access Trojan (RAT) program called Havex by hacking into the websites of industrial control system (ICS) manufacturers and poisoning their legitimate software downloads, researchers from security firm F-Secure said Monday in a blog post.
“Our research uncovered three software vendor sites that were compromised in this manner,” the F-Secure researchers said. “The software installers available on the sites were trojanized to include the Havex RAT. We suspect more similar cases exist but have not been identified yet.”
F-Secure did not name the affected vendors, but said that two of them develop ICS remote management software and the third supplies high-precision industrial cameras and related software. According to the security firm, the vendors are based in Germany, Switzerland and Belgium.
Find out more, Havex RAT malware.
http://www.f-secure.com/weblog/archives/00002718.html
“Our research uncovered three software vendor sites that were compromised in this manner,” the F-Secure researchers said. “The software installers available on the sites were trojanized to include the Havex RAT. We suspect more similar cases exist but have not been identified yet.”
F-Secure did not name the affected vendors, but said that two of them develop ICS remote management software and the third supplies high-precision industrial cameras and related software. According to the security firm, the vendors are based in Germany, Switzerland and Belgium.
Find out more, Havex RAT malware.
http://www.f-secure.com/weblog/archives/00002718.html