newbie2
August 13th, 2012, 01:43 PM
Dorifel botnet attack hits Dutch local authorities hard :
The virus hit 3,000 machines globally, and 90 percent of those involved organizations based in the Netherlands, said Kaspersky Lab Expert David Jacoby in a blog post. "We have seen government departments and hospitals being victims," he wrote, adding that other countries with a large number of detected infections were Denmark, the Philippines, Germany, the U.S. and Spain.
It remains unclear if the attacks are specifically targeting governments and high profile companies in the Netherlands, said Jacoby. "This is nothing that we can confirm, but for some reason the vast majority of all the victims come from Netherlands."
The cities of Den Bosch, Venlo, Weert and Borsele are among the infected local Dutch governments, as well as Tilburg, Almere and the province of North-Holland among others, Dutch IDG news site Webwereld reported. The virus that was spread by the Citadel botnet is called Dorifel and infects Microsoft Word and Microsoft Excel documents (http://www.pcadvisor.co.uk/news/security/3375301/dorifel-botnet-attack-hits-dutch-local-authorities-hard/) as well as executable files, according to the NCSC. Microsoft calls the virus Quervar.B and notes that it has been observed contacting remote hosts in order to download files onto computers.
As a 'side-note' : Use of security software in the Netherlands highest in the EU (http://www.cbs.nl/en-GB/menu/themas/vrije-tijd-cultuur/publicaties/artikelen/archief/2011/2011-3492-wm.htm)
:P
The virus hit 3,000 machines globally, and 90 percent of those involved organizations based in the Netherlands, said Kaspersky Lab Expert David Jacoby in a blog post. "We have seen government departments and hospitals being victims," he wrote, adding that other countries with a large number of detected infections were Denmark, the Philippines, Germany, the U.S. and Spain.
It remains unclear if the attacks are specifically targeting governments and high profile companies in the Netherlands, said Jacoby. "This is nothing that we can confirm, but for some reason the vast majority of all the victims come from Netherlands."
The cities of Den Bosch, Venlo, Weert and Borsele are among the infected local Dutch governments, as well as Tilburg, Almere and the province of North-Holland among others, Dutch IDG news site Webwereld reported. The virus that was spread by the Citadel botnet is called Dorifel and infects Microsoft Word and Microsoft Excel documents (http://www.pcadvisor.co.uk/news/security/3375301/dorifel-botnet-attack-hits-dutch-local-authorities-hard/) as well as executable files, according to the NCSC. Microsoft calls the virus Quervar.B and notes that it has been observed contacting remote hosts in order to download files onto computers.
As a 'side-note' : Use of security software in the Netherlands highest in the EU (http://www.cbs.nl/en-GB/menu/themas/vrije-tijd-cultuur/publicaties/artikelen/archief/2011/2011-3492-wm.htm)
:P