Kaspersky Labs GReAT Team recognized for ShadowPad discovery

Information Technology Press Releases Wednesday October 10, 2018 17:32
Bangkok--10 Oct--Kaspersky Lab

The Kaspersky Lab Global Research and Analysis Team (GReAT) was recognized with the Annual Peter Sz?r Award for Technical Security Research for its work on uncovering and analyzing the ShadowPad operation, one of the most significant supply-chain attacks known to date. The award was received at Virus Bulletin 2018, which took place on October 3 through October 5 at the Fairmont Queen Elizabeth hotel in Montreal, Quebec, Canada.

In July 2017, Kaspersky Lab researchers discovered ShadowPad, a backdoor hidden inside server management software that is used by hundreds of enterprises around the world. The malicious code was planted in the latest updates of this software, which is used in industries like financial services, education, telecoms, manufacturing, energy and transportation.

Kaspersky Lab GReAT researchers found that following the installation of an infected software update, the malicious module would send DNS-queries to specific domains (its command and control server) at a frequency of once every eight hours. The request would contain basic information about the victim's system. If the attackers considered the system to be 'interesting,' the command server would reply and activate a fully-fledged backdoor platform that would silently deploy itself inside the attacked computer. After that, on command from the attackers, the backdoor platform would be able to download and execute further malicious code. The threat actor behind the attack is believed to be Chinese-speaking.

"As the widely reported story of 'NotPetya' and 'CCleaner' show, supply chain attacks are a huge problem. ShadowPad emphasizes the point that such attacks can be very subtle and remain active for a very long time," said Martijn Grooten, editor, Virus Bulletin. "Kaspersky Lab's analysis provided both a general overview and very technical details of the attack, which will hopefully lead to more awareness of this threat and the issue of supply-chain attacks in general."

The Peter Sz?r award aims to recognize the best piece of technical security research published each year. Virus Bulletin created the award in Sz?r's honor after the researcher and Virus Bulletin advisory board member passed away in November 2013. Nominations for the award are sought from the security community at large, and a final shortlist is voted on by the Virus Bulletin advisory board. The award is presented each year at the annual Virus Bulletin conference.

"ShadowPad is a prime example of how dangerous and wide-scale a successful supply-chain attack can be. Had it not been detected and patched so quickly, ShadowPad could have affected thousands of organizations worldwide," said Costin Raiu, director, GReAT. "Receiving the Peter Sz?r award at Virus Bulletin is an absolute honor, and we are grateful not only for the recognition, but for the opportunity to continue protecting the world from cybercrime."

The findings were published on August 15, 2017, and the full report can be accessed on Securelist.com.

Latest Press Release

Whale Cloud and Alibaba Partner with Ghana on Innovative City Development

Whale Cloud (rebranded from ZTEsoft) has signed a Memorandum of Understanding (MoU) with the Republic of Ghana on innovative city development at the headquarters of Alibaba Group. Mr. Ben Zhou, CEO International of Whale Cloud, and Mrs. Ursula Owusu...

Singapore#s NAMIC Joins ASTM International#s Global Additive Manufacturing Center of Excellence as Strategic Partner

Today, global standards leader ASTM International announced that Singapore's National Additive Manufacturing Innovation Cluster (NAMIC) will join its Additive Manufacturing Center of Excellence as a strategic partner. ASTM International recently...

Codewise Names Dr. John Malatesta Chief Executive Officer

Codewise, the industry's first provider of AI-powered online ad measurement and management solutions for digital marketers, recognized by the Financial Times as one of the fastest-growing companies in Europe, today announced it has named Dr. John...

ADATA P10050C Power Bank Wins Golden Pin Design Award 2018

ADATA Technology, a leading manufacturer of high-performance DRAM modules and NAND Flash products, is proud to announce that its P10050C power bank has won a Golden Pin Design Award 2018. This win for the P10050C is a reaffirmation of ADATA's commitment...

ASUS พาสินค้าไอทีกวาด 9 รางวัลจาก #Good Design Awards 2018 ย้ำผู้นำด้านการออกแบบและนวัตกรรม นำโดย ZenBook S และ ZenFone 5

เอซุสคว้ารางวัลด้านการออกแบบจาก 'Good Design Awards' ได้รับรางวัลชนะเลิศถึง 9 ประเภทสินค้า ตั้งแต่ZenBook S, ZenFone 5, ZenBeam S2, Gimbal G3M, ProArt PA34VC, ProArt PQ22UC, ASUS Mini PC PN, PB series, และ ASUS VG49V...

Related Topics