VERY IMPORTANT

Recently, the 360 Threat Intelligence Center intercepted a sample of targeted attacks against Iraqi mobile operators ( Korek Telecom ). The operator is Iraqs fastest-growing mobile company serving 18 provinces in Iraq , serving businesses, governments and individual users. The attack sample was delivered using a spear phishing email: the victim was induced to open the attached Office Word document and the malicious macro was enabled. The malicious macro code will eventually release the back door of the PowerShell implementation , enabling remote control of the victims computer. After tracking and correlating, the 360 Threat Intelligence Center found that the attack was suspected to be related to the MuddyWater APT organization and traced and analyzed several malicious samples related to it.