¹È¸èËÑË÷·ºÆð¹ÊÕϵ¼Ö²¿·ÖÓû§ÎÞ·¨¿´µ½ËÑË÷Ч¹û

Ðû²¼Ê±¼ä 2023-04-19

1¡¢¹È¸èËÑË÷·ºÆð¹ÊÕϵ¼Ö²¿·ÖÓû§ÎÞ·¨¿´µ½ËÑË÷Ч¹û


ýÌå4ÔÂ18ÈÕ±¨µÀ³Æ£¬¹È¸èËÑË÷·ºÆðÎÊÌ⣬ËÑË÷ÒýÇæÎÞ·¨Îª²¿·ÖÓû§·µ»ØËÑË÷Ч¹û¡£¾ÝDownDetector³Æ£¬Õâ´Î¹ÊÕÏԼĪÔÚÃÀ¹ú¶«²¿Ê±¼äÍíÉÏ8µã50ÍÑÀëʼ£¬ÒѾ­ÓгÉǧÉÏÍòÓû§±¨¸æ¸ÃÎÊÌâ¡£ËÑË÷ʱЧ¹ûÒ³Ãæ½«ÏÔʾÖÖÖÖËÑË÷¿¨£¬ÈçÈËÃÇ»¹ÎÊ¡¢Ïà¹ØÊÓÆµºÍÏà¹ØËÑË÷µÈ¡£µ«²»ÏÔʾÈκÎËÑË÷Ч¹û£¬¶øÖ»ÓÐÒ»¸ö¡°¸ü¶àЧ¹û¡±°´Å¥¡£ÏÖÔÚ»¹²»ÇåÎúΪʲôÓÐЩÈËÊÜÓ°Ï죬¶øÓÐЩÈËûÓС£Ñо¿Ö°Ô±ÒѾ­ÁªÏµ¹È¸èѯÎÊÓйطþÎñÖÐÖ¹µÄÎÊÌ⣬µ«Ã»ÓÐÁ¬Ã¦»ñµÃ»Ø¸´¡£


https://www.bleepingcomputer.com/news/google/google-search-outage-prevents-some-from-seeing-search-results/


2¡¢ÍøÂç»ù´¡ÉèÊ©ÌṩÉÌCommScopeÊÓ²ìÆäÊý¾Ýй¶ÊÂÎñ


¾Ý4ÔÂ18ÈÕ±¨µÀ£¬ÃÀ¹úÍøÂç»ù´¡ÉèÊ©ÌṩÉÌCommScopeÕýÔÚÊÓ²ìÆäÊý¾Ýй¶ÊÂÎñ¡£½²»°ÈËÌåÏÖ£¬ÔÚ3ÔÂ27ÈÕÄÇÒ»ÖÜ·¢Ã÷ºÚ¿Í»á¼ûÁËÆä²¿·ÖIT»ù´¡ÉèÊ©¡£ÉÏÖÜÁù£¬ÀÕË÷ÍÅ»ïVice SocietyÔÚÍøÕ¾ÉÏÁгöÁ˸ù«Ë¾µÄÃû³Æ£¬²¢¹ûÕæÁËÇÔÈ¡µÄ´ó×ÚÐÅÏ¢£¬°üÀ¨30000¶àÃûÔ±¹¤µÄÊý¾Ý¡£Éæ¼°Ô±¹¤»¤ÕÕ£¬ÒÔ¼°·¢Æ±¡¢¹«Ë¾ÎļþºÍÒøÐÐÎļþµÈ¡£CommScopeÌåÏÖ£¬¿Í»§ÐÅϢδÊÜÓ°Ï죬ËûÃÇÕýÔÚÓëµÚÈý·½ÏàÖúÒÔÑéÖ¤ÉÏÊö˵·¨£¬²¢ÏàʶÊÜÓ°ÏìÐÅÏ¢µÄÐÔ×Ó¡£


https://therecord.media/commscope-network-infrastructure-cyberattack-vice-society


3¡¢Kaspersky·¢Ã÷QBotÐ®ÖÆÆóÒµµç×ÓÓʼþµÄ¹¥»÷Ô˶¯


4ÔÂ17ÈÕ£¬Kaspersky³ÆÆä·¢Ã÷ÁËÐÂÒ»ÂÖµÄQBot¹¥»÷Ô˶¯¡£4Ô³õ£¬Ñо¿Ö°Ô±ÊӲ쵽QBot¹¥»÷Ô˶¯¼¤Ôö£¬Ö÷ÒªÕë¶ÔµÂ¹ú¡¢°¢¸ùÍ¢¡¢Òâ´óÀû¡¢°¢¶û¼°ÀûÑǺÍÎ÷°àÑÀµÈ¹ú¼Ò¡£¹¥»÷ÕßÐ®ÖÆÕæÊµÆóÒµµç×ÓÓʼþ£¬È»ºó½«×Ô¼ºµÄÐÅÏ¢¼ÓÈëͨѶÏß³Ì×÷Ϊ»Ø¸´·¢ËͳöÈ¥¡£ÕâЩÐÂÎÅ»á±Þ²ßÊÕ¼þÈË·­¿ª¸½¼þµÄPDFÎļþ£¬È»ºóÓÕʹĿµÄÏÂÔØ°üÀ¨Windows¾ç±¾(wsf)ÎļþµÄZIPÎļþ¡£¸ÃWSFÎļþÖ´ÐеÄPowerShell¾ç±¾ÊµÑé´ÓURLÁбíÏÂÔØDLL£¬¼´QBot¶ñÒâÈí¼þ¡£


https://securelist.com/qbot-banker-business-correspondence/109535/


4¡¢Â×¶ØJTT·¢ËÍ1ÒÚ¶à·âÀ¬»øÓʼþ±»î¿Ïµ»ú¹¹·£¿î13ÍòÓ¢°÷


¾ÝýÌå4ÔÂ17ÈÕ±¨µÀ£¬Â׶صÄJoin The Triboo Limited(JTT)ÒòÎ¥·´PECR±»Ó¢¹úÊý¾Ýî¿Ïµ»ú¹¹·£¿î130000Ó¢°÷¡£JTTÔÚ2019Äê8ÔÂÖÁ2020Äê8ÔÂÏòԼĪ437324ÈË·¢ËÍÁË1.07ÒÚ·âÀ¬»øÓʼþ£¬ÕâÒâζ×ÅÆ½¾ùÿ¸öÊÕ¼þÈË»áÊܵ½244·â´ËÀàÓʼþ¡£ÈçÓ¢¹ú2003ÄêÒþ˽ºÍµç×ÓÌõÀýËùÊö£¬ÏòºÁÎÞ½äÐĵÄСÎÒ˽¼Ò·¢ËÍÖ±½ÓÓªÏúÐÅÏ¢ÊÇÒ»ÖÖÎ¥·¨ÐÐΪ¡£³ýÁËÓªÏúÐÅÏ¢Í⣬JTT»¹³äµ±ÊðÀí»ú¹¹£¬ÎªµÚÈý·½Íйܵç×ÓÓªÏú¡£


https://www.theregister.com/2023/04/17/ico_spam_email_fine/


5¡¢ÒÔÉ«ÁÐÌØ¹¤Èí¼þÌṩÉÌQuaDream½«ÔÚ¼¸ÌìÄÚ×èÖ¹ÔËÓª


ýÌå4ÔÂ17Èճƣ¬ÒÔÉ«ÁÐÌØ¹¤Èí¼þ¹©Ó¦ÉÌQuaDream½«ÔÚδÀ´µÄ¼¸ÌìÄÚ×èÖ¹ÔËÓª¡£ÉÏÖÜ£¬Citizen LabºÍMicrosoftÆØ¹âÁËÆäÌØ¹¤Èí¼þµÄ¹¥»÷Ô˶¯¡£ÒÔÉ«Áб¨ÉçCalcalist³Æ£¬¸Ã¹«Ë¾½ü¼¸¸öÔÂÀ´Ò»Ö±´¦ÓÚÄæ¾³£¬¶øÕâÏîÑо¿ÊÇѹËÀÂæÍÕµÄ×îºóÒ»¸ùµ¾²Ý¡£¸Ã¹«Ë¾ÒѾ­ÓÐÒ»¶Îʱ¼äûÓлîÔ¾ÁË£¬¾ÝÐÅÆä°ì¹«ÊÒÀïֻʣÏÂÁ½ÃûÔ±¹¤£¬ËûÃǵÄÊÂÇéÊÇÕÕ¿´µçÄÔºÍÆäËü×°±¸¡£¸Ã±¨É绹³Æ£¬¶­Ê»áÕýÊÔͼ³öÊÛ¹«Ë¾µÄ֪ʶ²úȨ¡£


https://thehackernews.com/2023/04/israeli-spyware-vendor-quadream-to-shut.html


6¡¢UptycsÐû²¼Æ¾Ö¤ÇÔÈ¡¶ñÒâÈí¼þZaraza BotµÄÆÊÎö±¨¸æ


4ÔÂ14ÈÕ£¬UptycsÐû²¼Á˹ØÓÚ¶ñÒâÈí¼þZaraza BotµÄÆÊÎö±¨¸æ¡£Zaraza botÊÇÒ»¸öʹÓÃC#±àÒëµÄ64λ¶þ½øÖÆÎļþ£¬¿É´Ó38¸öä¯ÀÀÆ÷ÖÐÇÔÈ¡µÇ¼ƾ֤£¬°üChrome¡¢Edge¡¢OperaºÍBraveµÈ¡£±ðµÄ£¬Ëü»¹¿ÉÒÔ²¶»ñ»îÔ¾´°¿ÚµÄÆÁÄ»½ØÍ¼£¬È»ºóÉúÑÄΪJPGÎļþ¡£Ò»µ©¶ñÒâÈí¼þѬȾÁËÄ¿µÄÅÌËã»ú£¬Ëü¾Í»á¼ìË÷Ãô¸ÐÊý¾Ý²¢·¢Ë͵½Telegram·þÎñÆ÷£¬¹¥»÷Õ߾ͿÉÒÔÁ¬Ã¦»á¼ûÕâЩÊý¾Ý¡£¸Ã¶ñÒâÈí¼þ×÷ΪһÖÖÉÌÒµ¹¤¾ßÌṩӦÆäËû¹¥»÷Õߣ¬ÏÖÔÚ»¹²»ÇåÎúËüÊÇÔõÑùÈö²¥µÄ¡£


https://www.uptycs.com/blog/zaraza-bot-credential-password-stealer