Trojan.Spy.YEK, the corporate spying tool
1 December 2010
IT in Manufacturing
Spying Trojan that looks for documents and archives that may hold private information and sends it back to the attacker.
The Stuxnet troubles are long from being forgotten and any sign of outside intrusion continues to be extremely sensitive news. These days, business is hard as it is, but when some e-threat comes along and sniffs for critical data, things could not get worse. A spying malware in the local network of a company means DANGER and unfortunately the number of such threats is constantly increasing.
And Trojan.Spy.YEK having both spying and backdoor features is a serious enemy. With an encrypted dll in its overlay, this Trojan is easily saved in windows\system32\netconf32.dll and once injected in explorer.exe nothing can stop it from connecting (whenever necessary) to a couple of meeting spots with the attacker.
The backdoor component helps it register itself as a service so as to receive and follow instructions from a command and control center, while the spyware component sends away data about files, operating system, while also making screenshots of the ongoing processes.
Some of the commands it is supposed to execute are: sending the collected files using a GET request, sending info regarding the operating system and computer, taking screenshots and sending the results, listing the processes that run on the system and sends them away, finding files with a certain extension. Shortly put, it uploads all the interesting data on a FTP server without the user’s consent.
The fact that it looks for all that it is linked to archives, e-mails (.eml, .dbx), address books (.wab), database and documents (.doc, .odt, .pdf etc) makes Trojan.Spy.YEK a prime suspect of corporate espionage as it seems to target the private data of the companies.
On top of that, the Trojan can run without problems on all versions of Windows from Win 95 to Seven. If you have not done that already, this should be a good time to try an antivirus.
Information in this article is available courtesy of BitDefender Malware Researchers Doina Cosovan and Octavian Minea.
For more information contact Alina Anton, BitDefender, +40 212 063 470, [email protected], www.bitdefender.com
Further reading:
How AI, digital twins, and predictive analytics are reshaping mining’s future
Schneider Electric South Africa
IT in Manufacturing
For mining companies across sub-Saharan Africa, the competitive gap is becoming harder to close through conventional methods alone. One of the clearest areas of value is predictive and prescriptive maintenance. AI and advanced analytics now allow mines to move from reactive to predictive operations.
Read more...
Install and commissioning time cut by 50% thanks to digital twin insights
Rockwell Automation
IT in Manufacturing
ECM Technologies, a world leader in the design and manufacture of innovative and modular low-pressure carburising industrial furnaces, has developed a solution that removes many of the installation and commissioning challenges relating to the development, testing and deployment of large-scale heat treatment plants.
Read more...
Real-time monitoring and predictive maintenance in African data centres
ACTOM Electrical Machines
IT in Manufacturing
Running a data centre in Africa brings many challenges. Traditional maintenance strategies struggle to keep up with these realities. Predictive maintenance offers a different approach.
Read more...
Siemens ecosystem strengthens data and AI integration
Siemens South Africa
IT in Manufacturing
Siemens has announced significant expansions to its Industrial Edge ecosystem, accelerating data and AI integration and releasing enhanced cybersecurity functionalities. These enable a seamless integration of IT and OT environments, optimise processes and reduce operational disruptions.
Read more...
Siemens manages shipbuilding process for HD Hyundai
Siemens South Africa
IT in Manufacturing
Siemens has been selected by HD Korea Shipbuilding & Offshore Engineering as a preferred partner to establish an integrated platform to manage the entire shipbuilding process as a single data flow to help ensure consistency across all its global shipyard facilities.
Read more...
Transforming the process industry through digitalisation
Endress+Hauser South Africa
IT in Manufacturing
By connecting field devices, systems and people, digitalisation creates new opportunities to optimise operations, enhance maintenance strategies and support continuous improvement. As a leading instrumentation provider and major source of process data, Endress+Hauser plays a key role in enabling this transformation.
Read more...
The OT operator’s guide to security and uptime on the plant
RJ Connect
IT in Manufacturing
The article addresses three common questions about industrial network deployment and maintenance, exploring ways to achieve better control and visibility with more efficiency.
Read more...
The assets you can’t see are the ones that can shut you down
IT in Manufacturing
ABEGuardOT is an asset management solution that delivers continuous, non-intrusive visibility across multi-vendor environments, including Siemens, Rockwell, ABB, Honeywell, Schneider Electric, Emerson, GE and Yokogawa, with support for OPC UA, EtherNet/IP, Modbus and Profibus.
Read more...
Edge I/O NTS and the need for industrial speed
Schneider Electric South Africa
IT in Manufacturing
One of the most compelling solutions to emerge from industrial automation is Edge I/O NTS, which represents a natural evolution of computing from centralised servers to localised, device-level input/output processing, offering improved speed, efficiency and resilience.
Read more...
The next wave of AI-driven process automation
Schneider Electric South Africa
IT in Manufacturing
As process industries hurtle toward an AI-driven future, four powerful trends are set to redefine automation strategies in 2026: hyper automation, AI-first automation, low code/no code platforms, and advanced process intelligence.
Read more...
printer friendly version