top of page
Search
robbyleavelle4007y

K.J 121105.zip







































K.J 121105.zip is a computer virus, in the sense that it has the ability to infect a device and disable or disturb its functions in various ways. A variant of this virus was recently discovered, which was used in all attacks from November 3rd until November 6th, 2018. The Friday evening attack resulted in widespread disruptions across Eastern Europe and even parts of Asia where ATMs were found with "Incorrect PIN" messages instead of the contents. Friday evening's attack appears to have been extensive, with smaller outbursts occurring at 10:49pm on Friday night and again at 3:48am on Saturday morning Since 2014 when it first appeared, K. J 121105.zip and its variants have been progressively adding new tactics to its repertoire. For example, earlier variants of this virus disable ATM PIN pad keypads by replacing the keyboard's firmware with a one-line program that simply reads "ATM Keyboard Downed. Please Insert Card." When this first started spreading in 2014, it did so through targeted attacks against specific bank branches. During these attacks, K.J 121105 would be delivered via malicious email attachments which would affect only certain branches within the bank network. The same year, K.J 121105 was responsible for malicious code being delivered via SMS messages on Android mobile devices. In 2016, K.J 121105 also began using two other methods to target customers. Attempts were made to target customers by intercepting the SMS notification of transactions being carried out on ATMs belonging to a given bank. Another involved infecting ATMs themselves by placing malware inside the ATM that would then talk back to a remote server using TCP port 443. At that time, customers were advised not to input their PIN into an infected ATM machine as this was considered the most likely method of infection via the virus. The 2017 variant of K. J 121105 began delivering the virus to customers through various social media accounts belonging to the bank. These accounts are usually actively managed by third party vendors contracted by banks. This led to an increase in the number of affected customers across South America. The first attack on November 3, 2018 resulted in widespread chaos for many demanding cash at their local bank. The infection was spread via SMS messages being sent out during ATM transactions on Friday night, resulting in infected ATMs being immediately turned off followed by display images of "INCOMPLETE TRANSACTION" messages. Many customers were forced to go to their bank branches which further aggravated the stress placed on the branch staff as the branch network was unable to handle the increased customer traffic. In all of these attacks, customers have been advised to avoid inserting their ATM card into infected ATMs as this is seen as the most likely route of infection. Similarly, customers have also been advised not to perform transactions via ATMs under any circumstances and instead to carry out transactions using cash at their local branch if they feel it is safe to do so. At 3:34am on November 4, 2018, a second attack occurred similar to that of the first attack on November 3. eccc085e13

0 views0 comments

Recent Posts

See All

Comments


bottom of page