  Winnti FAQ. More than just a game  Kaspersky Lab Expert Posted
April 11, 13:21  GMT Tags: Rootkits, Online Games, Targeted
Attacks, Certificate authorities, Cyber espionage, Spearphishing
Today Kaspersky Lab's team of experts published a detailed
research report that analyzes a sustained cyberespionage
campaign conducted by the cybercriminal organization known as
Winnti.  According to report, the Winnti group has been
attacking companies in the online video game industry since 2009
and is currently still active.  The group's objectives are
stealing digital certificates signed by legitimate software
vendors in addition to intellectual property theft, including
the source code of online game projects.  The attackers'
favorite tool is the malicious program we called "Winnti". It
has evolved since its first use, but all variants can be divided
into two generations: 1.x and 2.x. Our publication describes
both variants of this tool.  In our report we publish an
analysis of the first generation of Winnti.  The se