ZxShell

Community References

• Sensode (Cisco)

Malware References

• http://blog.trendmicro.com/trendlabs-security-intelligence/mers-news-used-in-targeted-attack-against-japanese-media-company/
• http://blogs.cisco.com/security/talos/opening-zxshell
• https://www.symantec.com/security_response/writeup.jsp?docid=2014-021716-3303-99&tabid=2
• https://www.f-secure.com/v-descs/backdoor_w32_zxshell_a.shtml
• http://blogs.cisco.com/security/talos/threat-spotlight-group-72
• http://www.talosintel.com/files/publications_and_presentations/papers/Cisco_security_Group72_wp.pdf
• http://www.symantec.com/connect/blogs/operation-cloudyomega-ichitaro-zero-day-and-ongoing-cyberespionage-campaign-targeting-japan
• http://www.crowdstrike.com/blog/french-connection-french-aerospace-focused-cve-2014-0322-attack-shares-similarities-2012/
• https://www.fireeye.com/blog/threat-research/2014/02/operation-snowman-deputydog-actor-compromises-us-veterans-of-foreign-wars-website.html
• https://www.bluecoat.com/security-blog/2014-07-21/korean-gaming-industry-still-under-fire
• https://www.novetta.com/2014/10/operation-smn-detailed-reporting-released/
• http://www.kashifali.ca/category/backdoor-zxshell/