Distribution of Malware Exploiting Vulnerable Innorix: Andariel

The ASEC (AhnLab Security Emergency response Center) analysis team has discovered the distribution of malware targeting users with vulnerable versions of Innorix Agent. The collected malware is a backdoor that attempts to connect to a C&C server.

Figure 1. Vulnerability security update notice from Korea Internet & Security Agency[1]

The exploited Innorix Agent is a file transfer solution client. Details about the vulnerability were posted by the Korea Internet & Security Agency (KISA)[1] where the INNORIX Agent versions that …

agency agent ahnlab amp analysis andariel asec backdoor center client connect distribution emergency exploited exploiting file transfer internet internet &amp korea malware malware analysis notice response security security update server solution targeting team update vulnerability vulnerable