Module: Cyber Security
Assignment: TMA 01
,Question One
Part One
a. Tangible asset is something you can physically touch, see or experience, like equipment,
inventory or a building.
b. Intangible asset is something of value that cannot be physically touched, such as trademarks
or domain names or indeed the reputation of a company or person.
c. Breach of data is an incident that has resulted in a confirmed compromise of an individual(s)
or organisation.
d. Organisational vulnerabilities relate to the weaknesses within a system caused by people,
such as inadequate procedures and policies or lack of cyber security training when handling
data.
e. Technological vulnerabilities are a weakness in the initial design, implementation or
configuration of software and hardware rendering it vulnerable to attack.
Word count: 114
, Part Two
Spearphishing Link is a variant of spearphishing which attaches malicious files to an email,
instead, spearphishing link utilizes links within an email to download malware, accompanied
by social engineering text such as posing as a trusted source to target a group or specific
person. The victim is then encouraged to clink on the link or copy and paste the URL, thus
relying upon specific action by the victim in order to gain access, also known as User
Execution.
By utilizing links instead of attachments, the malware is likely to avoid detection by defences
on a system that may inspect an email with attachments. Once the links are visited, the
victim’s system is then subject to exploitation.
a. AppleJeus has been used by the North Korean state funded advanced persistent threat
(APT) actors known as Lazarus Group. Active since 2009 and responsible for several high-
profile attacks, including that of Sony Pictures Entertainment in 2014.
b. Lazarus Group, used AppleJeus which is a family of downloaders embedded with
trojanized cryptocurrency to target organisations ranging from energy to government.
Spearphishing has been used by this group as the initial infection vector.
c. Link to external source of information providing details.
Lazarus targets defence industry with ThreatNeedle.
Word count: 203
Assignment: TMA 01
,Question One
Part One
a. Tangible asset is something you can physically touch, see or experience, like equipment,
inventory or a building.
b. Intangible asset is something of value that cannot be physically touched, such as trademarks
or domain names or indeed the reputation of a company or person.
c. Breach of data is an incident that has resulted in a confirmed compromise of an individual(s)
or organisation.
d. Organisational vulnerabilities relate to the weaknesses within a system caused by people,
such as inadequate procedures and policies or lack of cyber security training when handling
data.
e. Technological vulnerabilities are a weakness in the initial design, implementation or
configuration of software and hardware rendering it vulnerable to attack.
Word count: 114
, Part Two
Spearphishing Link is a variant of spearphishing which attaches malicious files to an email,
instead, spearphishing link utilizes links within an email to download malware, accompanied
by social engineering text such as posing as a trusted source to target a group or specific
person. The victim is then encouraged to clink on the link or copy and paste the URL, thus
relying upon specific action by the victim in order to gain access, also known as User
Execution.
By utilizing links instead of attachments, the malware is likely to avoid detection by defences
on a system that may inspect an email with attachments. Once the links are visited, the
victim’s system is then subject to exploitation.
a. AppleJeus has been used by the North Korean state funded advanced persistent threat
(APT) actors known as Lazarus Group. Active since 2009 and responsible for several high-
profile attacks, including that of Sony Pictures Entertainment in 2014.
b. Lazarus Group, used AppleJeus which is a family of downloaders embedded with
trojanized cryptocurrency to target organisations ranging from energy to government.
Spearphishing has been used by this group as the initial infection vector.
c. Link to external source of information providing details.
Lazarus targets defence industry with ThreatNeedle.
Word count: 203
