NYT Hackers Yet Again Attacking with Fresh Malicious Tools

Cyber-criminals behind the hack into computer systems of New York Times the widely read newspaper, during the second half of 2012, as well as of several other media firms, have been observed executing new hacks with fresh malware, says FireEye the security company.

The malware became noticeable whilst researchers at FireEye studied one new attempted assault against one organization that worked to give form to economic policies, said Nart Villeneuve, security researcher with FireEye. Computing.co.uk published this dated August 12, 2013.

It is believed that the latest assaults have their origin from the gang situated inside China, starting January 2013, the same time one detail report exposed them. FireEye thinks the gang, for its assaults, is utilizing up-to-date editions of Ixeshe and Aumlib -names of cracking codes.

According to Villeneuve, Aumlib that attackers have been employing within personalized assaults, currently, encrypts some HTTP communications; reported fireeye.com dated August 12, 2013.

The other cracking tool Ixeshe that emerged during 2009 and since serving for assaults against East Asian targets, currently, in one fresh edition is leveraging fresh network traffic, he adds.

Remarking about these findings, Ned Moran Senior malware Investigator with FireEye stated that the new codes' versions were created for aiding criminals in bypassing security identification whilst invading their victims' PC-networks. V3.co.uk reported this dated August 12, 2013.

Moran explained that there had been changes to the network procedure. Signatures that identified earlier editions of the cracking tools mightn't recognize the new network procedures, so the attacker could function unnoticed, he said.

And as per experts, incase FireEye's guess that the creator of the malicious tools is indeed the Chinese attackers' group, the tools according to Mandiant another security company being Advanced Persistent Threat 12, then it implies that the group is still there and that there are the essential resources with it for keeping up the prominent malware codes' efficacy.

Finally, the assault can be grouped with the several sophisticated threats unearthed in 2013. Security Company Abor Networks, lately informed about one fresh brute-force botnet scam that by now contaminated 25,000-or-more Windows computers utilizing malicious software infecting in an unknown way.

» SPAMfighter News - 8/19/2013