正文

1月27日每日安全热点 - 黑客利用MSHTML漏洞监视政府和国防目标

admin
admin V管理员 /0 评论 /67 阅读
0321
此篇文章发布距今已超过1141天，您需要注意文章的内容或图片是否可用！

漏洞 Vulnerability
CVE-2021-4034：Linux Polkit 权限提升漏洞通告
https://cert.360.cn/warning/detail?id=25d7a6ec96c91ca4e4238fd10da2c778
安全事件 Security Incident
Log4j:Mirai僵尸网络被发现针对ZyXEL网络设备
https://www.zdnet.com/article/log4j-mirai-ddos-botnet-targeting-zyxel-networking-devices/
黑客称他们加密了白俄罗斯铁路服务器以示抗议
https://www.bleepingcomputer.com/news/security/hackers-say-they-encrypted-belarusian-railway-servers-in-protest/
Android恶意软件BRATA在窃取数据后会擦拭你的设备
https://www.bleepingcomputer.com/news/security/android-malware-brata-wipes-your-device-after-stealing-data/
攻击者现在积极攻击关键的SonicWall RCE漏洞
https://www.bleepingcomputer.com/news/security/attackers-now-actively-targeting-critical-sonicwall-rce-bug/
加拿大外交部遭到黑客攻击，一些服务被关闭
https://www.bleepingcomputer.com/news/security/canadas-foreign-affairs-ministry-hacked-some-services-down/
黑客使用新的恶意软件打包器DTPacker来避免分析、检测
https://thehackernews.com/2022/01/hackers-using-new-malware-packer.html
一项新的间谍软件活动攻击工业企业窃取企业证书
https://gbhackers.com/a-new-spyware-campaign-targeting-industrial-enterprises/
黑客利用MSHTML漏洞监视政府和国防目标
https://thehackernews.com/2022/01/hackers-exploited-mshtml-flaw-to-spy-on.html
Watching hole在亚洲部署了新的macOS恶意软件DazzleSpy
https://www.welivesecurity.com/2022/01/25/watering-hole-deploys-new-macos-malware-dazzlespy-asia/
针对亚洲的水坑攻击活动部署macOS恶意软件DazzleSpy
https://www.welivesecurity.com/2022/01/25/watering-hole-deploys-new-macos-malware-dazzlespy-asia/
APT28针对政府官员和西亚国防工业的网络间谍活动
https://www.trellix.com/en-gb/about/newsroom/stories/threat-labs/prime-ministers-office-compromised.html