Z - MAKE TROY NOT WAR - Case Study of the Wiper APT in Korea, and Beyond

Explore a detailed analysis of the 2013 "Wiper" malware attack on South Korean financial institutions and TV networks in this 44-minute conference talk from Black Hat Asia 2014. Delve into the initial infection vector, examining how attackers compromised a central security management server to distribute malicious updates. Investigate multiple Wiper samples, uncovering relationships between them and connections to other Advanced Persistent Threat (APT) cases dating back to 2009. Learn about the attack's timeline, methodology, and impact, while considering potential attribution hypotheses. Gain valuable insights into this significant cybersecurity incident and its broader implications for network security and APT detection.