7 ms·

the attackers broke into the update servers of a popular antivirus software, which was used on employees' PCs. Are you referring to Ahnlab? I'm convinced that

by kyllo 14y ago

the attackers broke into the update servers of a popular antivirus software, which was used on employees' PCs. Are you referring to Ahnlab? I'm convinced that Ahnlab's virus scanner software is itself a form of spyware. Wouldn't surprise me at all if it has been used as an attack vector.

kijin 14y ago
No, I'm referring to the Nate/Cyworld incident, in which an update to the Alyak (알약) antivirus program, developed by ESTsoft, was regarded as a prime suspect. Alyak is extremely popular in Korea, due to the fact that it is free and comes bundled with Alzip (알집), a popular compression utility. IMO the entire Altools (알툴즈) family of programs is utter shit. Their entire domain is blacklisted in every PC I manage. Ahnlab is a much more respectable company, and I have yet to hear of a major security incident where Ahnlab software was implicated. Their V3 line of software are clearly not the best in the industry, but I would be very surprised if they were any worse than other antiviruses. Edit: According to the latest news, today's malware was disguised as a component of an antivirus program sold by Hauri, Inc. (하우리)