CISAºÍFBIÐû²¼Õë¶ÔKaseya¹©Ó¦Á´¹¥»÷Êܺ¦ÕßµÄÖ¸ÄÏ£»Ñо¿ÍŶÓÅû¶Ð½©Ê¬ÍøÂçmirai_pteaµÄDDoS¹¥»÷Ô˶¯
Ðû²¼Ê±¼ä 2021-07-071.CISAºÍFBIÐû²¼Õë¶ÔKaseya¹©Ó¦Á´¹¥»÷Êܺ¦ÕßµÄÖ¸ÄÏ

CISAºÍFBIÍŽáÐû²¼ÁËÕë¶ÔÊܵ½Kaseya¹©Ó¦Á´¹¥»÷Ó°ÏìµÄÊܺ¦ÕßµÄÖ¸ÄÏ¡£ÕâÁ½¸ö»ú¹¹½¨Òé×é֯ʹÓÃKaseyaÌṩµÄ¼ì²â¹¤¾ßÀ´¼ì²éËûÃǵÄϵͳÊÇ·ñ±£´æÈëÇÖ¼£Ï󣬲¢ÆôÓöàÒòËØÉí·ÝÑéÖ¤(MFA)¡£±ðµÄ£¬×éÖ¯»¹Ó¦Ê¹Óð×Ãûµ¥À´ÍⲿÏÞÖÆ¶ÔÆäÄÚ²¿×ʲúµÄ»á¼û£¬²¢Ê¹Ó÷À»ðǽ»òVPN±£»¤ÆäÔ¶³Ì¼à¿Ø¹¤¾ßµÄ¹ÜÀí½çÃæ¡£¶øÊÜÓ°ÏìµÄMSP¿Í»§ÐèҪȷ±£±¸·ÝÊÇ×îÐµģ¬²¢ÇÒÁ¬Ã¦×°Öù©Ó¦ÉÌÌṩµÄ×îеIJ¹¶¡¡£
ÔÎÄÁ´½Ó£º
https://securityaffairs.co/wordpress/119728/cyber-crime/cisa-fbi-guidance-kaseya-attack.html
2.¹ú¼ÊÐ̾¯×éÖ¯LyrebirdÐж¯¾Ð²¶Ä«Î÷¸çºÚ¿ÍDr HeX

¹ú¼ÊÐ̾¯×éÖ¯ÌᳫµÄLyrebirdÐж¯¾Ð²¶ÁËÄ«Î÷¸çºÚ¿ÍDr HeX¡£Dr HeX×Ô2009ÄêÒÔÀ´×îÏÈ»îÔ¾£¬¾ÙÐйý¶àÖÖÍøÂç·¸·¨Ô˶¯£¬°üÀ¨ÍøÂç´¹ÂÚ¡¢¶ñÒâÈí¼þ¿ª·¢ºÍڲƵȡ£ÔÚ´Ë´ÎÐж¯ÖУ¬Group-IBͨ¹ýÕë¶Ô·¨¹úÄ³ÒøÐеÄÍøÂç´¹ÂÚ¹¤¾ß°üʶ±ð³öÁ˸ÃÍøÂç·¸·¨·Ö×Ó¡£±ðµÄ£¬¸ÃºÚ¿Í»¹ÌØÊâÍÆ¹ãÁËËùνµÄZombi Bot£¬¾Ý³ÆÆäÖаüÀ¨814¸öÎó²î£¬ÓÐ72¸öδ¹ûÕæµÄÎó²î¡¢Ò»¸ö±©Á¦ÆÆ½â³ÌÐò¡¢webshellºÍºóÃÅɨÃè³ÌÐò£¬»¹¿ÉÒÔÓÃÀ´Ö´ÐÐDDoS¹¥»÷¡£
ÔÎÄÁ´½Ó£º
https://thehackernews.com/2021/07/interpol-arrests-hacker-in-morocco-who.html
3.Ñо¿ÍŶÓÅû¶Ð½©Ê¬ÍøÂçmirai_pteaµÄDDoS¹¥»÷Ô˶¯

Ñо¿ÍŶÓÅû¶ÁËÊÜMiraiÆô·¢µÄн©Ê¬ÍøÂçmirai_ptea£¬Ê¹ÓÃKGUARDÌṩµÄÊý×ÖÊÓÆµÂ¼Ïñ»ú(DVR)ÖеÄÒ»¸öδ¹ûÕæµÄÎó²îÀ´ÌᳫÂþÑÜʽ¾Ü¾ø·þÎñ(DDoS)¹¥»÷¡£Ñо¿Ö°Ô±ÓÚ2021Äê3ÔÂ23ÈÕÊ×´ÎÊÓ²ìÁ˸ù¥»÷Ô˶¯£¬ºóÓÖÓÚ2021Äê6ÔÂ22ÈÕÔٴμì²âµ½Á˹¥»÷ʵÑé¡£Ñо¿ÍŶӳƽ©Ê¬Ô´IPµÄµØÀíÂþÑÜÖ÷Òª¼¯ÖÐÔÚÃÀ¹ú¡¢º«¹úºÍ°ÍÎ÷£¬¶øÊܺ¦Õ߱鲼ŷÖÞ¡¢ÑÇÖÞ¡¢°Ä´óÀûÑÇ¡¢±±ÃÀºÍÄÏÃÀ£¬ÒÔ¼°·ÇÖÞ²¿·ÖµØÇø¡£
ÔÎÄÁ´½Ó£º
https://www.ehackingnews.com/2021/07/newly-discovered-mirai-botnet-is.html
4.ºÚ¿ÍÔÚ°µÍø¹ûÕæÉç½»ÍøÕ¾GETTR½ü9Íò»áÔ±µÄСÎÒ˽¼ÒÐÅÏ¢

ºÚ¿ÍÔÚ°µÍøÉϹûÕæÁËÉç½»ÍøÕ¾GETTR½ü9Íò»áÔ±µÄСÎÒ˽¼ÒÐÅÏ¢¡£GETTRÊÇÒ»¸öеÄÇ×ÌØÀÊÆÕµÄÉ罻ýÌåÆ½Ì¨£¬ÓÉÇ°ÌØÀÊÆÕÕÕÁϽÜÉÃ×ÀÕ½¨É裬×÷ΪTwitterµÄÌæ»»Æ·¡£Çå¾²¹«Ë¾Hudson RockÌåÏÖ£¬ºÚ¿ÍʹÓÃÒ»¸ö²»Çå¾²µÄAPIץȡ87973ÃûGETTR³ÉÔ±µÄÊý¾Ý£¬°üÀ¨µç×ÓÓʼþµØÖ·¡¢êdzơ¢ÐÕÃû¡¢³öÉúÈÕÆÚ¡¢Í·ÏñURL¡¢Å侰ͼƬ¡¢Î»Öá¢Ð¡ÎÒ˽¼ÒÍøÕ¾ºÍÆäËûÄÚ²¿ÍøÕ¾Êý¾Ý¡£ÏÖÔÚ£¬GETTRÍøÕ¾²¢Î´¶Ô´ËʾÙÐлظ´¡£
ÔÎÄÁ´½Ó£º
https://www.bleepingcomputer.com/news/security/hacker-dumps-private-info-of-pro-trump-gettr-social-network-members/
5.GriefÉù³ÆÆä¹¥»÷ŦԼ¿µ¸´Ò½ÔºRSS²¢»ñÈ¡4GBµÄÊý¾Ý

ºÚ¿ÍÍÅ»ïGriefÉù³ÆÆä¹¥»÷ÁËŦԼµÄ¿µ¸´Ò½ÔºRehabilitation Support Services(RSS)²¢»ñÈ¡ÁË4GBµÄÊý¾Ý¡£6ÔÂ2ÈÕ£¬Grief½«¸Ã»ú¹¹¼ÓÈëÊܺ¦ÕßÃûµ¥£¬²¢³ÆÆäÒѾÇÔÈ¡ÁË4GBÊý¾Ý¡£6ÔÂ29ÈÕ£¬GriefÉÏ´«ÁËÇÔÈ¡µÄÊý¾Ý£¬°üÀ¨×ʲúÇ·Õ®±í¡¢Ë°ÊÕ¡¢Ö§Æ±¡¢´æ¿î¡¢ÒøÐжÔÕ˵¥¡¢·¢Æ±¡¢ºÍ×ÊÔ´ÏîĿժҪµÈ²ÆÎñÐÅÏ¢£»Ò½ÁƱ£½¡Ö¤Êµ¡¢Ò½ÁÆÎļþºÍ´û¿î´û¿îÉêÇ룬ÒÔ¼°²¿·Ö¿Í»§ºÍÔ±¹¤µÄÉç»áÇå¾²ºÅÂëºÍ¼ÝÕÕºÅÂëµÈСÎÒ˽¼ÒÐÅÏ¢¡£¸Ã»ú¹¹ÉÐδ¶Ô´ËÊÂ×÷³ö»ØÓ¦¡£
ÔÎÄÁ´½Ó£º
https://www.databreaches.net/ny-grief-claims-to-have-breached-rehabilitation-support-services/
6.Money.co.ukÐû²¼2021ÄêQ2ڲƺÍÍøÂç·¸·¨ÆÊÎö±¨¸æ

Money.co.ukÐû²¼ÁË2021ÄêQ2Ó¢¹úÓйØÚ²ÆºÍÍøÂç·¸·¨µÄÆÊÎö±¨¸æ¡£±¨¸æÖ¸³ö£¬2020ÄêÍø¹ºÏúÊÛ¶îÔöÌíÁË46%£¬Ôö·ùΪ½üÊ®Äê×î¸ß¡£Òò´Ë£¬Ú²ÆÔ˶¯Ò²¼±¾çÔöÌí£¬2021ÄêÉϰëÄêËðʧÁè¼Ý10ÒÚÓ¢°÷¡£2021ÄêQ2¹²ÓÐ81018ÆðթƺÍÍøÂç·¸·¨°¸¼þ£¬×ܼÆËðʧΪ3.823ÒÚÓ¢°÷£»Ïà±È֮ϣ¬2021Äê1ÔÂÖÁ3Ô±¬·¢ÁË137695Æð·¸·¨°¸¼þ£¬Éæ°¸½ð¶îΪ6.256ÒÚÓ¢°÷¡£¶øÔÚ2021Äê4ÔÂÖÁ6ÔÂʱ´ú£¬´ËÀàÔ˶¯µÄÊܺ¦Õ߯½¾ùÿÈËËðʧÁË4719Ó¢°÷¡£
ÔÎÄÁ´½Ó£º
https://www.money.co.uk/credit-cards/quarterly-fraud-report


¾©¹«Íø°²±¸11010802024551ºÅ