Malware targets Afghan and Tajik military and diplomatic subjects

Focusing on detections of the Korplug trojan, ESET® researchers recently noticed two larger scale campaigns employing this well-known Remote Access Trojan (RAT). The first one, related to Afghanistan and Tajikistan is analyzed by Robert Lipovsky in his newest blog post on WeLiveSecurity.com. The other one, targeting a number of high-profile organizations in Russia, will be presented at The ZeroNights security conference in Moscow on Friday, November 14 by Anton Cherepanov.

Apart from the targets discussed in the presentation of Anton Cherepanov, the trojan analyzed in the blog post on WeLiveSecurity.com appears to be focused on gathering top secret military and diplomatic information from various institutions mainly in Afghanistan and Tajikistan. “From the subjects of the files used to spread the malware, as well as from the affected targets, it appears that the attackers are interested in gathering intelligence related to Afghan, Tajik and Russian military and diplomatic subjects,” explains Robert Lipovsky in his blog post on WeLiveSecurity.com.

Malware targets Afghan and Tajik military and diplomatic subjects