Changes Detected in CHM Malware Distribution

AhnLab Security Emergency response Center (ASEC) has previously covered a CHM malware type impersonating Korean financial institutes and insurance companies. Recently, the execution method of this malware type has been changing every week. This post will cover how the changed execution processes of the CHM malware are recorded in AhnLab’s EDR products.

Figure 1 shows the detection diagram in EDR products on the execution method of the CHM malware impersonating financial institutes and insurance companies. …

ahnlab asec center changing chm companies distribution edr emergency financial impersonating insurance malware malware analysis malware distribution processes products response security week