[Lista ArNOG] Fwd: [lacnog] Slingshot APT: Malware spread via routers

[Jose Luis Painceira]

---------- Forwarded message ----------
From: Robert MARTIN-LEGENE <robert en pch.net>
Date: Tue, Mar 13, 2018 at 11:09 AM
Subject: [lacnog] Slingshot APT: Malware spread via routers
To: lacnog en lacnic.net


Esto debe afectuar a LAC tambien, ya que muchos usan MikroTik.

This should affect the LAC region too, since so many use MikroTik.

-------- Forwarded Message --------
Subject: [afnog] Slingshot APT: Malware spread via routers
Date: Tue, 13 Mar 2018 13:48:51 +0400
From: Daniel Shaw <daniel en afrinic.net> <daniel en afrinic.net>
To: afnog <afnog en afnog.org> <afnog en afnog.org>

For anyone that uses MikroTik, now is a good time to make sure your
firmware is updated and scan any network admins' windows workstations.
https://www.kaspersky.com/blog/web-sas-2018-apt-announcement-2/21514/
https://arstechnica.com/information-technology/2018/03/potent-malware-that-hid-for-six-years-spread-through-routers/
https://www.engadget.com/2018/03/11/sophisticated-malware-attacks-through-routers/?sr_source=Facebook
https://securelist.com/apt-slingshot/84312/

It doesn't seem to be that widely detected so far, but what makes this
one interesting is how long it's remained undetected. And what is
perhaps of interest to this list is that is seems to target mostly
Africa (and the Middle East).

Regards,
Daniel




_______________________________________________
afnog mailing listhttps://www.afnog.org/mailman/listinfo/afnog


_______________________________________________
LACNOG mailing list
LACNOG en lacnic.net
https://mail.lacnic.net/mailman/listinfo/lacnog
Cancelar suscripcion: https://mail.lacnic.net/mailman/options/lacnog




-- 
Saludos,

*Ing. José Luis Painceira*
*PCCP S.A.  -  http://www.pccp.net.ar <http://www.pccp.net.ar/>*
Av. Cabildo 2040 15° D - C1428AAP - Buenos Aires - 0810-345-9800
------------ próxima parte ------------
Se ha borrado un adjunto en formato HTML...
URL: <http://mailmancabase.interdotnet.com.ar/pipermail/lista/attachments/20180313/f0fb2fcf/attachment.html>