Vigilantes Counter Christchurch Manifesto with Weaponized Version

guest · Mar 28, 2019

Vigilantes Counter Christchurch Manifesto with Weaponized Version
March 28, 2019
https://www.bleepingcomputer.com/ne...ristchurch-manifesto-with-weaponized-version/

Old-school approach
Researchers at network protection company Blue Hexagon discovered a file that pretends to be the original 74-page manifesto of the Christchurch shooter, but has been altered to include a malicious payload.
Hidden inside the modified document is a VBA script downloads a binary payload. The code is obfuscated, which makes it more difficult to determine its intention.

The downloaded executable is called "Haka.exe" and replaces the MBR information with a message that is shown after the computer restarts.
Make your computer boot normally again
"Haka.exe" does not make any changes that can't be reverted. It looks like its purpose is just to make a statement. Restoring your computer to normal boot is not only possible, but it is also easy.
Click to expand...

https://forums.theregister.co.uk/forum/all/2019/03/28/new_zealand_manifesto_malware/
Comment
It's 2019 and...
... a Word document can run an embedded BASIC program which has permissions to connect to the Internet and download an executable binary and then run it, which then has permissions to trash the MBR.
Has Microsoft set a new world record? [...]
Click to expand...

Log in or Sign up

Vigilantes Counter Christchurch Manifesto with Weaponized Version

guest Guest

Log in or Sign up

Vigilantes Counter Christchurch Manifesto with Weaponized Version

guest Guest

Useful Searches