[cmNOG] Please Check if Your IP are Listed | HIDDEN COBRA – North Korean Trojan: Volgmer

[Sylvain BAYA]

[Français en Dessous]
Hi cmNOGers,
The message below may be of interest to you, so please pay attention and
just check if some of your IP addresses are not also listed...
Many thanks.
Regards,
--sb.

[Français]
Chers/Chères Membres de la liste du cmNOG,
Le message en dessous pourrait vous être utile, alors prière d'y prêter
attention en vérifiant si certaines de vos adresses IP ne s'y trouvent
pas aussi listées...
Merci bien.
Cordialement,
--sb.
__

Site web : https://www.cmnog.cm <https://www.cmnog.cm/> 
News : https://www.cmnog.cm/news 
Liste de Diffusion : https://lists.cmnog.cm/mailman/listinfo/cmnog
<https://lists.cmnog.cm/mailman/listinfo/cmnog> 
Wiki : https://www.cmnog.cm/wiki 
Compte Twitter : https://twitter.com/cmN0G 
Hashtags : #cmNOG #REBOOTcmNOG 
Page Facebook : https://facebook.com/cmNOG 
Ancien Blog : https://cmnog.wordpress.com <https://cmnog.wordpress.com/> 





Le 15/11/2017 à 14:40, Brenna Thomas a écrit :
> Title: HIDDEN COBRA – North Korean Trojan: Volgmer
> Source: US-CERT
> Date Published: November 14, 2017
> Excerpt:
>
> "FBI has high confidence that HIDDEN COBRA actors are using the IP
> addresses—listed in this report’s IOC files—to maintain a presence on
> victims’ networks and to further network exploitation. DHS and FBI are
> distributing these IP addresses to enable network defense and reduce
> exposure to North Korean government malicious cyber activity.
>
> This alert includes IOCs related to HIDDEN COBRA, IP addresses linked to
> systems infected with Volgmer malware, malware descriptions, and
> associated signatures. This alert also includes suggested response
> actions to the IOCs provided, recommended mitigation techniques, and
> information on reporting incidents. If users or administrators detect
> activity associated with the Volgmer malware, they should immediately
> flag it, report it to the DHS National Cybersecurity and Communications
> Integration Center (NCCIC) or the FBI Cyber Watch (CyWatch), and give it
> the highest priority for enhanced mitigation."
>
>
> To read the complete article see:
>
> <https://www.us-cert.gov/ncas/alerts/TA17-318B>
>
> https://www.team-cymru.org/News/dnb.html


-- 

   Best Regards !                           
                         
  Sylvain BAYA
 cmNOG's Co-Founder & Coordinator
   (+237) 677005341                             
 PO Box 13107 YAOUNDE / CAMEROON
baya.sylvain [AT cmNOG DOT cm]
 http://www.cmnog.cm
 https://cmnog.wordpress.com
 ************************
  ‪#‎LASAINTEBIBLE‬(‪#‎Romains15‬:33):"Que LE ‪#‎DIEU‬ de ‪#‎Paix‬ soit
avec vous tous!‪#‎Amen‬!"
‪#‎MaPrière‬ est que tu naisses de nouveau.
‪#‎Chrétiennement‬                       
             « Comme une biche soupire après des courants d’eau, Ainsi
mon âme soupire après toi, ô DIEU! » (Psaumes 42 :2)



-------------- section suivante --------------
Une pièce jointe HTML a été nettoyée...
URL: <http://lists.cmnog.cm/pipermail/cmnog/attachments/20171115/85c8a8fd/attachment-0001.html>
-------------- section suivante --------------
Une pièce jointe autre que texte a été nettoyée...
Nom: signature.asc
Type: application/pgp-signature
Taille: 819 octets
Desc: OpenPGP digital signature
URL: <http://lists.cmnog.cm/pipermail/cmnog/attachments/20171115/85c8a8fd/attachment-0001.sig>