Evolution of LODEINFO Malware
released on 2020-06-11 @ 04:20:41 PM
In a previous blog, LODEINFO malware was introduced. LODEINFO malware is aimed at organizations in Japan. JPCERT/CC has confirmed that attacks using this malware are still active, and there is a movement to spread the infection by using file names related to COVID-19. In addition, LODEINFO is frequently updated, and we have confirmed that multiple functions have been added or changed.
In this issue, we will introduce the trends that have been seen in LODEINFO's series of attacks and the updates.