Endpoint Protection

 View Only
  • 1.  Trojan-Wiper?

    Posted Dec 04, 2014 02:33 PM

    The virus that was used for Sony, seems like McAfee is referring to it as Trojan-Wiper, Is this the same name Symantec refers to it as?  Is there any write up on it and also are we protected with the latest definations against this virus / malware?



  • 2.  RE: Trojan-Wiper?
    Best Answer

    Posted Dec 04, 2014 02:39 PM

    No. The one is called Backdoor.Destover. See here:

    http://www.symantec.com/security_response/writeup.jsp?docid=2014-120209-5631-99

    https://www-secure.symantec.com/connect/forums/sony-hack



  • 3.  RE: Trojan-Wiper?

    Posted Dec 04, 2014 02:46 PM
      |   view attached

    attached is what McAfee's write up is on the virus, I am looking for something comparable from Symantec.  I do not think destover is the one.

    Attachment(s)



  • 4.  RE: Trojan-Wiper?

    Posted Dec 04, 2014 02:48 PM

    It's the same one. Just different names



  • 5.  RE: Trojan-Wiper?

    Posted Dec 04, 2014 02:53 PM

    New blog just posted:

    https://www-secure.symantec.com/connect/blogs/destover-destructive-malware-has-links-attacks-south-korea



  • 6.  RE: Trojan-Wiper?

    Posted Dec 04, 2014 02:56 PM

    ok, so we are looking for virus that was linked with Sony, not south korea.



  • 7.  RE: Trojan-Wiper?

    Posted Dec 04, 2014 02:59 PM

    The Sony hack is being blamed on SK. This is the same one.



  • 8.  RE: Trojan-Wiper?

    Posted Dec 04, 2014 03:03 PM

    ok thanks, as per Symantec Phone Support, they are saying Trojan.Jokra, I think Destover uses the components of Jokra in some ways?

     

     



  • 9.  RE: Trojan-Wiper?

    Posted Dec 04, 2014 03:05 PM

    Yes, it's in the blog link I just posted. But there are multiple components to this so expect some names to chane/be added.



  • 10.  RE: Trojan-Wiper?

    Posted Dec 04, 2014 03:14 PM

    Thanks!



  • 11.  RE: Trojan-Wiper?

    Posted Dec 04, 2014 03:24 PM

    Welcome :)