JSOC INSIGHT vol.19 English Edition

"JSOC INSIGHT" is an analysis report on the trend of security incidents, such as unauthorized access and malware infection, in Japan, based on daily analysis results by our JSOC security analysts. Since this report analyzes the trends in attacks, based on the data of incidents which JSOC customers actually encountered, the report will help in understanding world trends as well as actual threats that Japanese users are facing.

JSOC INSIGHT vol.19 contains below topics.

• Code execution vulnerability in Oracle WebLogic Server
• Increased attacks in which sources are hidden
• Increasing suspicious emails that may lead to malware infection

Contents

1. Preface
2. Executive Summary
3. Trends in Severe Incidents at the JSOC
    3.1 Trends in severe incidents
    3.2 Types of traffic to pay attention to
4. Topics of This Volume
    4.1 Code execution vulnerability in Oracle WebLogic Server
     4.1.1 Examples of attacks detected that exploited the vulnerability
     4.1.2 Trend of attacks detected that exploited the vulnerability
     4.1.3 Countermeasures against the vulnerability
    4.2 Increased attacks in which the sources are hidden
     4.2.1 Monitoring and observations
     4.2.2 Dispersed sources of attack traffic
     4.2.3 To prevent being damaged
    4.3 Increasing suspicious emails that may lead to malware infection
     4.3.1 Observations
     4.3.2 Overview of suspicious emails
     4.3.3 Countermeasures against suspicious emails
5. Conclusion