Èðµä¹«¹²ÎÀÉú¾ÖSmiNetÉÏÖÜÔâ¶à´Î¹¥»÷ÔÝʱ¹Ø±Õ£»£»£»£»Á½¸öеÄÍÅ»ïPrometheusºÍGrief¼ÓÈëÊýÊ®ÒÚÀÕË÷Êг¡

Ðû²¼Ê±¼ä 2021-06-01

1.Èðµä¹«¹²ÎÀÉú¾ÖSmiNetÉÏÖÜÔâ¶à´Î¹¥»÷ÔÝʱ¹Ø±Õ


1.jpg


Èðµä¹«¹²ÎÀÉú¾Ö (Folkh?lsomyndigheten)µÄѬȾ²¡ÏµÍ³SmiNetÔâµ½¶à´Î¹¥»÷£¬£¬£¬£¬ £¬£¬£¬£¬ÔÝʱ¹Ø±Õ¡£¡£¡£¡£¡£¡£SmiNetÊÇÓÃÓÚ´æ´¢COVID-19ѬȾͳ¼ÆÊý¾ÝµÄµç×Ó±¨¸æ£¬£¬£¬£¬ £¬£¬£¬£¬ÔÚÔâµ½¶à´Î¹¥»÷ºóÓÚÉÏÖÜËĹرÕÒÔ¾ÙÐÐÊӲ죬£¬£¬£¬ £¬£¬£¬£¬²¢ÓÚÉÏÖÜÎåÍíÉÏÖØÐÂÉÏÏß¡£¡£¡£¡£¡£¡£¿ÉÊÇÓÉÓÚϵͳ¹Ø±Õ£¬£¬£¬£¬ £¬£¬£¬£¬¸Ã»ú¹¹×ÔÉÏÖÜÈýÏÂÖç4µã×îÏÈÎÞ·¨±¨¸æCOVID-19ͳ¼ÆÊý¾Ý£¬£¬£¬£¬ £¬£¬£¬£¬Ö±µ½±¾ÖÜËÄ6ÔÂ3ÈղŻª»Ö¸´Õý³£¡£¡£¡£¡£¡£¡£ÏÖÔÚ£¬£¬£¬£¬ £¬£¬£¬£¬ÊÓ²ìÈÔÔÚ¾ÙÐÐÖУ¬£¬£¬£¬ £¬£¬£¬£¬ÉÐδ·¢Ã÷ÓÐÊý¾Ýй¶µÄ±¨¸æ¡£¡£¡£¡£¡£¡£


Ô­ÎÄÁ´½Ó£º

https://www.bleepingcomputer.com/news/security/swedish-health-agency-shuts-down-sminet-after-hacking-attempts/


2.Á½¸öеÄÍÅ»ïPrometheusºÍGrief¼ÓÈëÊýÊ®ÒÚÀÕË÷Êг¡


2.jpg


Á½¸öÐÂÐ˵ĵÄÀÕË÷ÍÅ»ïPrometheusºÍGrief¼ÓÈëÊýÊ®ÒÚÀÕË÷Êг¡¡£¡£¡£¡£¡£¡£PrometheusÓÚ¿ËÈÕ¹ûÕæÁËÄ«Î÷¸çÕþ¸®µÄÊý¾Ý£¬£¬£¬£¬ £¬£¬£¬£¬¿ÉÄÜÊǵÚÒ»¸öÔÚÀ­¶¡ÃÀÖÞÖ÷Òª¹ú¼Ò¾ÙÐÐÔÆÔÆ´ó¹æÄ£»£»£»£»î¶¯µÄÍŻ£¬£¬£¬ £¬£¬£¬£¬Æä»¹¹ûÕæÁË27ÃûÊܺ¦×éÖ¯µÄÊý¾Ý£¬£¬£¬£¬ £¬£¬£¬£¬°üÀ¨¼ÓÄɹú¼Ò×ÔÈ»Æø¹«Ë¾¡¢Ëþ¶ûÈøÐÄѪ¹ÜÖÐÐÄÒÔ¼°·¨¹ú¡¢Å²Íþ¡¢ÈðÊ¿¡¢ºÉÀ¼¡¢°ÍÎ÷¡¢ÂíÀ´Î÷ÑǺͰ¢ÁªÇõµÈ¹úµÄ¹«Ë¾¡£¡£¡£¡£¡£¡£GriefÔò³ÆÆäÒѹ¥»÷ÁË5¸ö×éÖ¯£¬£¬£¬£¬ £¬£¬£¬£¬ÆäÖÐ1¸öÔÚÄ«Î÷¸ç¡£¡£¡£¡£¡£¡£


Ô­ÎÄÁ´½Ó£º

https://securityaffairs.co/wordpress/118446/cyber-crime/prometheus-grief-ransomware.html


3.Ñо¿Ö°Ô±ÑÝʾÔõÑùÈÆ¹ýMicrosoft PatchGuardµÄ¹¥»÷


3.jpg


Ñо¿Ö°Ô±Kento OkiÑÝʾÁËÔõÑùÈÆ¹ýMicrosoft PatchGuardµÄ¹¥»÷¡£¡£¡£¡£¡£¡£PatchGuardÒ²³ÆÎªÄں˲¹¶¡±£»£»£»£»¤£¬£¬£¬£¬ £¬£¬£¬£¬ÓÚ2005Äê±»ÒýÈëWindows²Ù×÷ϵͳ¡£¡£¡£¡£¡£¡£Kento³ÆPatchGuardÖб£´æÒ»¸öÎó²î£¬£¬£¬£¬ £¬£¬£¬£¬¿É±»ÓÃÀ´½«Î´ÊðÃûµÄ¶ñÒâ´úÂë×¢Èëµ½Windows²Ù×÷ϵͳÄÚºËÖУ¬£¬£¬£¬ £¬£¬£¬£¬²¢¹ûÕæÁ˴˴ι¥»÷µÄÊÖÒÕϸ½ÚÒÔ¼°¿´·¨ÑéÖ¤ (PoC) ´úÂë¡£¡£¡£¡£¡£¡£ÏÖÔÚ£¬£¬£¬£¬ £¬£¬£¬£¬Î¢Èí²¢Î´ÐÞ¸´¸ÃÎó²î£¬£¬£¬£¬ £¬£¬£¬£¬²¢ÇÒÆäÔÚÒÔǰ»¹½«ÆäËüPatchGuardÈÆ¹ýÎó²î±ê¼ÇΪ·ÇÇå¾²ÎÊÌâ¡£¡£¡£¡£¡£¡£


Ô­ÎÄÁ´½Ó£º

https://securityaffairs.co/wordpress/118427/hacking/microsoft-patchguard-kpp-bypass.html


4.Cisco TalosÅû¶Accusoft ImageGearÖеĶà¸öÎó²î


4.jpg


Cisco TalosÅû¶ÁËAccusoft ImageGearÖеĶà¸öÎó²î¡£¡£¡£¡£¡£¡£ImageGearÊÇÒ»¸öÎĵµÍ¼Ïñ¿ª·¢¹¤¾ß°ü£¬£¬£¬£¬ £¬£¬£¬£¬ÔÊÐíÓû§½¨Éè¡¢±à¼­¡¢×¢ÊͺÍת»»ÖÖÖÖͼÏñ¡£¡£¡£¡£¡£¡£´Ë´ÎÅû¶µÄÎó²î°üÀ¨Ô½½çдÎó²î£¨CVE-2021-21793¡¢CVE-2021-21794ºÍ(CVE-2021-21824£©¡¢»º³åÇøÒç³öÎó²î(CVE-2021-21795¡¢CVE-2021-21808ºÍCVE-2021-21821£©ÒÔ¼°Ô¶³Ì´úÂëÖ´ÐÐÎó²î£¨CVE-2021-21833£©µÈ¡£¡£¡£¡£¡£¡£


Ô­ÎÄÁ´½Ó£º

https://blog.talosintelligence.com/2021/06/vuln-spotlight-accusoft-.html    


5.Check PointÐû²¼2021ÄêÑÇÌ«µØÇøÍøÂç¹¥»÷ÆÊÎö±¨¸æ


5.jpg


Check PointÐû²¼ÁË2021ÄêÑÇÌ«µØÇøÍøÂç¹¥»÷µÄÆÊÎö±¨¸æ¡£¡£¡£¡£¡£¡£±¨¸æÖ¸³ö£¬£¬£¬£¬ £¬£¬£¬£¬Óë2020Äê5ÔÂÏà±È£¬£¬£¬£¬ £¬£¬£¬£¬ÑÇÌ«µØÇø (APAC) µÄÍøÂç¹¥»÷ÊýĿͬ±ÈÔöÌíÁË168%£¬£¬£¬£¬ £¬£¬£¬£¬¶øÔÚ2021Äê4ÔÂÖÁ5ÔÂʱ´ú¾ÍÔöÌíÁË53%¡£¡£¡£¡£¡£¡£Ôö·ù×î´óµÄ¶ñÒâÈí¼þÀàÐÍÊÇÀÕË÷Èí¼þºÍÔ¶³Ì»á¼ûľÂí (RAT)£¬£¬£¬£¬ £¬£¬£¬£¬Óë½ñÄêÄêÍ·Ïà±È£¬£¬£¬£¬ £¬£¬£¬£¬¶¼ÔöÌíÁË26%£¬£¬£¬£¬ £¬£¬£¬£¬¶øÒøÐÐľÂíºÍÐÅÏ¢ÇÔÈ¡¹¤¾ßÒ²ÔöÌíÁË10%¡£¡£¡£¡£¡£¡£ÍøÂç¹¥»÷´ÎÊýÔö·ù×î´óµÄǰ5¸ö¹ú¼Ò/µØÇøÊÇÈÕ±¾£¨40%£©¡¢ÐÂ¼ÓÆÂ£¨30%£©¡¢Ó¡¶ÈÄáÎ÷ÑÇ£¨25%£©¡¢ÂíÀ´Î÷ÑÇ£¨22%£©ºÍÖйų́Í壨17%£©¡£¡£¡£¡£¡£¡£


Ô­ÎÄÁ´½Ó£º

https://blog.checkpoint.com/2021/05/27/check-point-research-asia-pacific-experiencing-a-168-year-on-year-increase-in-cyberattacks-in-may-2021/


6.KasperskyÐû²¼2021ÄêQ1 Non-mobileÍþÐ²Ì¬ÊÆ±¨¸æ


6.jpg


KasperskyÐû²¼ÁË2021ÄêQ1 Non-mobileÍþÐ²Ì¬ÊÆµÄÆÊÎö±¨¸æ¡£¡£¡£¡£¡£¡£±¨¸æÖ¸³ö£¬£¬£¬£¬ £¬£¬£¬£¬µÚÒ»¼¾¶ÈÖÐ×î¶àµÄ½ðÈÚ¶ñÒâÈí¼þÊÇZeuS/Zbot£¨30.8%£©¡¢CliptoShuffler(15.9%)ºÍTrickster (7.5%)£¬£¬£¬£¬ £¬£¬£¬£¬ÊÜ´ËÀ๥»÷×î¶àµÄ¹ú¼ÒΪÍÁ¿âÂü˹̹£¨6.3%£©¡¢Ëþ¼ª¿Ë˹̹£¨5.3%£©ºÍ°¢¸»º¹£¨4.8%£©¡£¡£¡£¡£¡£¡£±ðµÄ£¬£¬£¬£¬ £¬£¬£¬£¬KasperskyÔÚQ1¹²¼ì²âµ½ÁË7¸öеÄÀÕË÷Èí¼þºÍ4354ÖÖбäÌ壬£¬£¬£¬ £¬£¬£¬£¬ÊÜ´ËÀ๥»÷×î¶àµÄ¹ú¼ÒΪÃϼÓÀ­¹ú£¨2.31%£©¡¢°£Èû¶í±ÈÑÇ£¨0.62%£©ºÍÏ£À°£¨0.49%£©¡£¡£¡£¡£¡£¡£


Ô­ÎÄÁ´½Ó£º

https://securelist.com/it-threat-evolution-q1-2021-non-mobile-statistics/102425/