This version also includes the symbol of the ‘Maori’ in the third page, which is not part of the original manifesto. The author info in this modified version reveals that the author is Maori. This modified version was uncovered by Blue Hexagon Labs. However, the modified version of the manifesto that includes a malicious payload is being distributed online. The original manifesto was removed from the sites where it was initially posted and the New Zealand government announced that the distribution and possession of the manifesto are objectionable under the law. The manifesto titled ‘The Great Replacement’ was in multiple file formats such as MS Word and PDF. Last week, a manifesto authored by the suspect who is charged with carrying out terror attacks in two mosques in Christchurch was circulated online. Why it matters - The payload overwrites the master boot record (MBR) with a message ‘This is not us!’, which is displayed after the system restarts. This weaponized version includes a payload. What is the issue - A modified version of the Christchurch attack suspect’s manifesto is circulating online. The payload overwrites the Master Boot Record (MBR) with a message ‘This is not us!’, which is displayed after the system restarts.The modified version contains an obfuscated VBA script code that attempts to download the second stage payload.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |