Enhance cybersecurity awareness and survivability for DoD, industry partners, and academia in the face of the ever-increasing threat of cyber attacks. Cybersecurity (CS) includes managing risks related to the use, processing, storage, and transmission of information and the systems and processes used for those purposes, including analog and physical form. CS includes information availability, identification and authentication, confidentiality, integrity, and non-repudiation as well as the economic considerations with respect to selection of CS techniques, CS processes, and industry trends.
Group Admins
Alert (TA17-164A) HIDDEN COBRA – North Korea’s DDoS Botnet Infrastructure
This topic contains 0 replies, has 1 voice, and was last updated by 
nmaida 3 months, 2 weeks ago.
-
Posts
-
US-Cert released Alert TA17-164A HIDDEN COBRA – North Korea’s DDoS Botnet Infrastructure on June 13, 2017.
“This joint Technical Alert (TA) is the result of analytic efforts between the Department of Homeland Security (DHS) and the Federal Bureau of Investigation (FBI). This alert provides technical details on the tools and infrastructure used by cyber actors of the North Korean government to target the media, aerospace, financial, and critical infrastructure sectors in the United States and globally. Working with U.S. Government partners, DHS and FBI identified Internet Protocol (IP) addresses associated with a malware variant, known as DeltaCharlie, used to manage North Korea’s distributed denial-of-service (DDoS) botnet infrastructure. This alert contains indicators of compromise (IOCs), malware descriptions, network signatures, and host-based rules to help network defenders detect activity conducted by the North Korean government. The U.S. Government refers to the malicious cyber activity by the North Korean government as HIDDEN COBRA.”
Click on the link to read the alert: https://www.us-cert.gov/ncas/alerts/TA17-164A
You must be logged in to reply to this topic.
