Archive for January, 2013


Karpersky Lab…

January 15, 2013

Kaspersky is one of the famous anti virus company in the world. Kaspersky offers many product and services to its customer worldwide , including Kaspersky Pure 2.0 , Kaspersky Internet Security 2013 , T-Drive  Tech Titan T-Drive Pro and much more.  Kaspersky offers many product and services to it’s customer  that includes for home , small office and business.

During the past five years, a high-level cyber-espionage campaign has successfully infiltrated computer networks at diplomatic, governmental and scientific research organizations, gathering data and intelligence from mobile devices, computer systems and network equipment.

Kaspersky Lab’s researchers have spent several months analyzing this malware, which targets specific organizations mostly in Eastern Europe, former USSR members and countries in Central Asia, but also in Western Europe and North America.

The campaign, identified as “Rocra”, short for “Red October”, is currently still active with data being sent to multiple command-and-control servers, through a configuration which rivals in complexity the infrastructure of the Flame malware. Registration data used for the purchase of C&C domain names and PE timestamps from collected executables suggest that these attacks date as far back as May 2007.

Were initial attacks launched at select “high-profile” victims or were they launched in series of larger (wave) attacks at organizations/victims?

All the attacks are carefully tuned to the specifics of the victims. For instance, the initial documents are customized to make them more appealing and every single module is specifically compiled for the victim with a unique victim ID inside.

Later, there is a high degree of interaction between the attackers and the victim – the operation is driven by the kind of configuration the victim has, which type of documents the use, installed software, native language and so on. Compared to Flame and Gauss, which are highly automated cyberespionage campaigns, Rocra is a lot more “personal” and finely tuned for the victims.  – Taking from excerpt form The “Red October” Campaign – An Advanced Cyber Espionage Network Targetting Diplomatic and Goverment Agencies.- Karpersky Lab.

p/s:- I have been worked as a System Engineer at Karpersky Lab last year. It is such a great experience i have…