| On Sunday, December 16th the Iranian CERT issued an advisory warning of a new "targeted data wiping malware."
SophosLabs analyzed these new samples and can confirm that they do in fact attempt to erase the contents of any files on the D:, E:, F:, G:, H: and I: drives.
What is less apparent is why Iran considers this malware to be targeted and, if this malware is indicative of the sophistication of their adversaries, why they are concerned at all. Read More .. |