Dec.6 PDF attack. What Can the U.S. Learn from China’s Energy Policy? from matthewgebert@yahoo.com Sun, 6 Dec 2009 06:56:40

CVE-2009-0658 Buffer overflow - non-JavaScript function call and possibly an embedded JBIG2 image stream, as exploited in the wild in February 2009 by Trojan.Pidief.E.

Download infected attachments (password protected archive. You will have to contact me for a password)

•  Details: fcff95e5a0736d6e1a861f415b19a4b2  - WhatCantheU.S.LearnfromChina'sEnergyPolicy.pdf

From: Matthew Gebert [mailto:matthewgebert@yahoo.com]


Sent: Sunday, December 06, 2009 9:57 AM


To: matthewgebert@yahoo.com


Subject: What Can the U.S. Learn from China’s Energy Policy?






The joke among China hands goes like this: If the Americans and the Chinese start talking about a major project today, in two years the Chinese will be done and the Americans will still be talking and applying for permits.

The message sender was
    matthewgebert@yahoo.com

 The message was titled What Can the U.S. Learn from China’s Energy Policy?
The message date was Sun, 6 Dec 2009 06:56:40 -0800 (PST) The message identifier was <133325.58274.qm@web113916.mail.gq1.yahoo.com>
The virus or unauthorised code identified in the email is:
F-Secure Security Platform version 1.12  build 6412 Copyright (c) 1999-2007 F-Secure Corporation. All Rights Reserved.

Scan started at Sun Dec  6 14:56:44 2009 Database version: 2009-12-05_02

attach/5963824_3X_PM5_EMS_MA-PDF__China=27s=2DEnergy=2DPolicy=2DAnalysis.pdf: Infected: Exploit.SWF.Agent.ci [AVP]
attach/5963824_4X_PM6_EMS_MA-PDF__WhatCantheU.S.LearnfromChina=27sEnergyPolicy.pdf: Infected: Exploit.JS.Pdfka.ajt [AVP]

Scan ended at Sun Dec  6 14:56:45 2009
5 files scanned
2 files infected

Oct. 2 PDF attack of the day. Fwd: U.S. Assiatance to North Korea from mark.manyin@gmail.com Fri, 2 Oct 2009 22:22:06

CVE-2009-0658 Buffer overflow - non-JavaScript function call and possibly an embedded JBIG2 image stream, as exploited in the wild in February 2009 by Trojan.Pidief.E. 

Links updated: Jan 18, 2023

Download 028ebdeea729a8c18ca1406ff102088d U.S. Assiatance to North Korea.pdf (Password protected archive. Please contact me if you need the password)

From: Mark Manyin [mailto:mark.manyin@gmail.com]
Sent: Friday, October 02, 2009 10:22 AM
Subject: Fwd: U.S. Assiatance to North Korea

Dear Colleagues,

I was able to secure permission to forward you the attached report on U.S. Assiatance to North Korea. We intentionally kept it short report, in hopes that it would increase its readership.

Please share with your colleagues. Also, please share their comments, observations and questions.

Best,

Mark Manyin
Specialist in Asian Affairs
Congressional Research Service
7-7653

The message sender was
    mark.manyin@gmail.com

The message originating IP was 209.85.222.117 The message recipients were
xxx@xxx.xxx

The message was titled Fwd: U.S. Assiatance to North Korea The message date was Fri, 2 Oct 2009 22:22:06 +0800 The message identifier was <1aa371b60910020722l10e85dd1v7b8fb8b4f05514bc@mail.gmail.com>
The virus or unauthorised code identified in the email is:
F-Secure Security Platform version 1.12  build 6412 Copyright (c) 1999-2007 F-Secure Corporation. All Rights Reserved.

Scan started at Fri Oct  2 14:40:46 2009 Database version: 2009-10-02_07

attach/5965436_3X_PM5_EMS_MA-PDF__U.S.=20Assiatance=20to=20North=20Korea.pdf: Infected: Exploit.Win32.Pidief.bvw [AVP]

Scan ended at Fri Oct  2 14:40:46 2009
2 files scanned
1 file infected