AhnLab Warns of Malware Impersonating Real Estate Investment Documents

"Do Not Open Email Attachments from Unverified Sources"

[Asia Economy Reporter Jin-gyu Lee] AhnLab announced on the 26th that it recently discovered malware disguised as a real estate investment-related document file.

The attacker distributed an email titled '※(Changgoheodeuk) Gyeonggi Icheon Yul-myeon Wolpori.9980pyeong.Urgent 1.8 billion.Tomokwan.hwp' and attached a malicious document file with the same name as the email subject.

To avoid user suspicion, the attacker attached other normal documents and image files with different titles along with the malicious file. When the user executes the file containing the malware among the multiple attached files, the malware embedded in the document file is executed.

After infecting the user's PC, the malware connects to a specific URL presumed to be the attacker's command & control server. It can then perform malicious activities such as downloading additional malware.

To prevent such damage, AhnLab urged users to ▲ avoid opening attachments or URLs from unknown sources ▲ apply the latest security patches for the operating system (OS) ▲ keep antivirus software up to date. Yoorim Choi, a senior researcher at AhnLab's analysis team, advised, "It is essential to make security practices such as not executing attachments from unknown sources a daily habit."

This content was produced with the assistance of AI translation services.