마이크로소프트(MicroSoft), Lnk File 0-Day에 대한 자료들

이번 Lnk 제로데이에 대한 내용들을 링크로 정리 해 둔다.

분석을 얼렁 끝내야 할텐데 ㅠ_ㅠ

- 관련 링크

http://anti-virus.by/en/tempo.shtml

http://www.securelist.com/en/blog/269/Myrtus_and_Guava_Episode_1

http://www.securelist.com/en/blog/271/Myrtus_and_Guava_Episode_2

http://www.securelist.com/en/blog/272/Myrtus_and_Guava_Episode_3

http://www.securelist.com/en/blog/278/LNK_zero_day_the_fundamentals

http://www.f-secure.com/weblog/archives/00001986.html

http://www.f-secure.com/weblog/archives/00001987.html

http://blogs.technet.com/b/mmpc/archive/2010/07/16/the-stuxnet-sting.aspx

http://www.symantec.com/connect/blogs/w32temphid-commonly-asked-questions

http://blog.trendmicro.com/usb-worm-exploits-windows-shortcut-vulnerability/

http://www.sophos.com/blogs/gc/g/2010/07/19/shortcut-zeroday-attack-code-public/

http://www.microsoft.com/technet/security/advisory/2286198.mspx

http://www.symantec.com/security_response/writeup.jsp?docid=2010-071400-3123-99&tabid=2

http://www.sophos.com/security/analyses/viruses-and-spyware/trojstuxneta.html

http://www.avira.de/en/threats/section/fulldetails/id_vir/5318/rkit_stuxnet.a.html

http://hauri.co.kr/customer/security/alert_view.html?intSeq=56&page=1

http://blog.ahnlab.com/asec/365

http://blog.eset.com/2010/07/19/win32stuxnet-signed-binaries

http://malwaresurvival.com/2010/07/20/ms-shortcut-security-flaw-being-exploited/

http://www.securelist.com/en/blog/2234/Stuxnet_and_stolen_certificates

http://www.securelist.com/en/blog/2236/Stuxnet_signed_certificates_frequently_asked_questions

http://community.websense.com/blogs/securitylabs/archive/2010/07/20/microsoft-lnk-vulnerability-brief-technical-analysis-cve-2010-2568.aspx

- Sophos 취약점 시연 동영상

- CVE-2010-2568 취약점에 대한 Fix it 제공(Microsoft Security Advisory: Vulnerability in Windows Shell could allow remote code execution)

원문 : http://support.microsoft.com/kb/2286198

- 지데이타(G-Data), G Data LNK-Checker 

http://www.gdatasoftware.co.uk/support/downloads/tools.html

- 소포스(Sophos), Windows Shortcut Exploit Protection Tool

http://www.sophos.com/products/free-tools/sophos-windows-shortcut-exploit-protection-tool.html