Trojan-Downloader.Win32.Kongger. A is a Trickler that targets the Windows platform. It has been reported that this Downloader is used in a targeted attack against various Tibetan activist organizations. It arrives on the infected system through a spear phishing email, containing a Microsoft Word document which drops a malicious component on the infected system. Moreover, this malware signals back to a remote server sending its configuration information, expecting to receive other malicious file. One component of the malware is signed with a stolen certificate, while the other is signed with a fake one.

• Microsoft Windows All Versions