NETWORK & SECURITY INCIDENT REPORT

Ceylon Petroleum Storage Terminals LTD

Date: 2019-04-30 INCIDENT #SI-20190430-001
The Incident: Virus infected website access
(Downloader trojan)

Incident Type: Virus incident

Severity:Critical
Status : Blocked by forti firewall

Description of Incident:

Fortigate Analyzer :
A downloader trojan infected site access. Once an user visit
the site. The infected file will start downloading to the
users PC.

JS/Agent.DW!tr.dldr is classified as a downloader trojan.

Downloader Trojan has the capability to download other
malicious files or an updated version of itself.
The Fortinet Anti-Virus Analyst Team is currently in the
process of creating a detailed description for this virus.
Corrective Action Taken:

Block the websites from firewall temporary.

Preventive Action Taken:

Informed users not to use the said websites further informed.

Informed the the websites owners through Manager IS (to
provide information security service to a Sri lankan reputed
organization)

Reported By: Priyashantha Fernando (Snr, Engineer : Network &

security)
Date : 2019/04/30

Action Taken By : Priyashantha Fernando (Snr, Engineer :

Network & security)
Date : 2019/04/30