正文

12月1日每日安全热点 - ScarCruft组织监视朝鲜叛逃者和人权活动人士

admin
admin V管理员 /0 评论 /39 阅读
0321
此篇文章发布距今已超过1144天，您需要注意文章的内容或图片是否可用！

漏洞 Vulnerability
CVE-2021-3769: ohmyzsh 更新
https://nvd.nist.gov/vuln/detail/CVE-2021-3769
Foxit PhantomPDF和PDF Reader的多个漏洞
https://www.foxit.com/support/security-bulletins.html?Security+updates+available+in+Foxit+PhantomPDF+10.1.62021-11-29+00%3A00%3A00
安全事件 Security Incident
暗网出售假的COVID-19疫苗证明
https://www.databreachtoday.com/darknet-markets-advertise-fake-covid-19-vaccine-passports-a-18010
巴基斯坦国家数据库生物特征数据泄露
https://www.databreachtoday.com/pakistans-national-database-biometric-data-compromised-a-18009
新的Chinotto间谍软件以朝鲜叛逃者、人权活动家为目标
https://thehackernews.com/2021/11/new-chinotto-spyware-targets-north.html
黑客使用受损的谷歌云帐户挖掘加密货币
https://thehackernews.com/2021/11/hackers-using-compromised-google-cloud.html
与朝鲜有联系的Zinc集团冒充三星招聘人员，瞄准安全公司
https://securityaffairs.co/wordpress/125071/apt/north-korea-zinc-targets-security-firms.html
WIRTE针对中东的攻击活动
https://securelist.com/wirtes-campaign-in-the-middle-east-living-off-the-land-since-at-least-2019/105044/
ScarCruft组织监视朝鲜叛逃者和人权活动人士
https://securelist.com/scarcruft-surveilling-north-korean-defectors-and-human-rights-activists/105074/
赛博空间的魔眼：PROMETHIUM伪造NotePad++安装包的攻击活动分析
https://mp.weixin.qq.com/s/nQVUkIwkiQTj2pLaNYHeOA