Based on McAfee's findings, at the end of December one of the organizations relating to the 2018 Winter Olympics to be held in Pyeongchang, South Korea, received an email containing malware.
The email uses an event-related domain and loads Microsoft Word document text in Korean. One of them with the domain icehockey@pyeongchang2018.com.
Using the document file along with photos, cyber attackers have infiltrated a malware that when the email is opened will go directly into the Windows Powershell system that runs the program on the computer.
In the text document in the email described the recipient will be prompted to open the file in Microsoft Word application. When it's done, the malware command-line code will start running and infiltrate the device.
Types of malware attacks that are not present with extensions or files themselves are predicted more prevalent in 2018. This method is considered difficult for the security system to browse and find malware that goes into the device because it is directly infiltrated into the operating system of the device.
The malware does not appear in the form of the file itself, but directly embedded in the computer operating system. McAfee first discovered it on December 22 and on 28 December more and more cyber attacks were found.
Seeing from most victims is the organization related to the implementation of the 2018 Winter Olympics in South Korea appears allegations that this is related to the meeting of South Korea and North Korea to discuss this event.