ij¿ç¹ú¹«Ë¾Òò50ÒÚ´Î×Ô¶¯²¦ºÅµç»°±»FCC· £¿î½ü3ÒÚÃÀÔª

Ðû²¼Ê±¼ä 2023-08-08

1¡¢Ä³¿ç¹ú¹«Ë¾Òò50ÒÚ´Î×Ô¶¯²¦ºÅµç»°±»FCC· £¿î½ü3ÒÚÃÀÔª


¾ÝýÌå8ÔÂ4ÈÕ±¨µÀ £¬ÃÀ¹úFCC¶ÔÒ»¼Ò¿ç¹úÍøÂ繫˾· £¿î299997000ÃÀÔª £¬Ôµ¹ÊÔ­ÓÉÊǸù«Ë¾ÔÚ2021ÄêÈý¸öÔÂÄÚÏòÁè¼Ý5ÒÚ¸öµç»°ºÅÂ벦´òÁË50ÒÚ´Î×Ô¶¯²¦ºÅµç»° ¡£FCC³Æ £¬¸Ã¹«Ë¾Î¥·´Á˶àÏî×Ô¶¯É§Èŵ绰½ûÁî £¬°üÀ¨Î´¾­ÊÂÏÈÃ÷È·Ô޳ɼ¨ÏòÊÖ»ú²¦´òÔ¤ÏÈÂ¼ÖÆµÄÓïÒôµç»°¡¢Î´¾­ÊéÃæÔ޳ɲ¦´òµç»°ÓªÏúµç»°¡¢²¦´ò¹ú¼Òեȡºô½Ð¹ÒºÅ²áÉϵĺÅÂëÒÔ¼°Î´ÄÜÔÚ×îÏÈʱʶ±ðÀ´µçÕßµÄÉí·ÝµÈ ¡£±ðµÄ £¬ÕâЩµç»°ÓªÏúʹÓÃÀ´µçÏÔʾÓÕÆ­¹¤¾ßÀ´ÑÚÊÎ×Åʵ¼ÊȪԴ £¬ÕâҲΥ·´ÁËÖ´·¨ ¡£ÈôÊÇÊÜÖÆ²ÃʵÌåδÄÜÊµÊ±ÍÆÐи¶¿îÒåÎñ £¬ÃÀ¹ú˾·¨²¿½«½éÈë ¡£


https://www.bleepingcomputer.com/news/security/extended-warranty-robocallers-fined-300-million-after-5-billion-scam-calls/


2¡¢ÃÀ¹úÏÄÍþÒÄË«×Ó×ù±±ÌìÎĄ̈Ôâµ½¹¥»÷µ¼ÖÂÔËÓªÔÝʱÖÐÖ¹


ýÌå8ÔÂ3ÈÕ±¨µÀ³Æ £¬ÃÀ¹ú¹ú¼ÒÌìÎÄѧÖÐÐÄÔâµ½¹¥»÷ £¬µ¼ÖÂÏÄÍþÒÄÒ»¸öÌìÎĄ̈µÄÔËÓªÊܵ½Ó°Ïì ¡£ÃÀ¹ú¹ú¼Ò¿ÆÑ§»ù½ð»áµÄ¹ú¼Ò¹âѧºìÍâÌìÎÄѧÑо¿ÊµÑéÊÒ£¨NOIRLab£©³ÆÆä·¢Ã÷¹¥»÷ºóÁ¬Ã¦½ÓÄɲ½·¥ £¬²¢³öÓÚÉóÉ÷˼Á¿¹Ø±ÕÁËË«×Ó×ùÌìÎĄ̈ÅÌËã»úϵͳ ¡£ÏÖÔÚ £¬Ë«×Ó×ùÍøÕ¾ºÍÌá°¸¹¤¾ßÒÑÀëÏß £¬µ«NOIRLabÍøÕ¾ÈÔ¼á³ÖÔÚÏß״̬ ¡£¸ÃʵÑéÊÒûÓÐ͸¶ÕâÊÇ·ñÊÇÀÕË÷¹¥»÷ £¬µ«ÌåÏÖÕâ¶ÔNOIRLabÖÐÐĵįäËü»ù´¡ÉèʩûÓÐÓ°Ïì ¡£


https://therecord.media/gemini-north-observatory-cyberattack


3¡¢Î÷°àÑÀµÄÖÁÉÙ72¸öÍøÕ¾Ôâµ½NoName057µÄDDoS¹¥»÷


¾Ý8ÔÂ7ÈÕ±¨µÀ £¬Î÷°àÑÀÖÁÉÙ72¸öÍøÕ¾Ôâµ½¶íÂÞ˹ºÚ¿ÍÍÅ»ïNoName057µÄDDoS¹¥»÷ ¡£¹¥»÷±¬·¢ÔÚ7ÔÂ19ÈÕÖÁ30ÈÕÖ®¼ä £¬Ó°ÏìÁËÒøÐС¢µçÐÅÌṩÉÌ¡¢Ã½ÌåºÍÂÃÓι«Ë¾ ¡£±»¹¥»÷ÍøÕ¾»¹°üÀ¨×ÜÀí¹ÙÛ¡La Moncloa¡¢·¨Ôº¡¢Ë¾·¨²¿¡¢ÁìÍÁÕþ²ß²¿ÒÔ¼°¹ú·À²¿»ú¹¹Isdefe ¡£¾ÝϤ £¬´Ë´Î¹¥»÷²¢Î´µ¼ÖÂÈκÎÃô¸ÐÊý¾Ýй¶ ¡£NoName057»¹Ôø¼ÓÈëÁËÓ벨À¼¡¢Á¢ÌÕÍðÒÔ¼°½Ý¿Ë¹²ºÍ¹ú×ÜͳºòÑ¡ÈËÏà¹ØµÄ¹¥»÷ ¡£


https://www.infosecurity-magazine.com/news/russian-hacktivists-overwhelm/


4¡¢PhylumÔÚNPMÖмì²âµ½¶à¸öÇÔÈ¡¿ª·¢Ö°Ô±Êý¾ÝµÄ¶ñÒâ°ü


8ÔÂ4ÈÕ±¨µÀ³Æ £¬PhylumÔÚnpm°ü¹ÜÀíÆ÷Éϼì²âµ½Á˶à¸ö²î±ðµÄ¡°test¡±°ü £¬Ö¼ÔÚй¶¿ª·¢Ö°Ô±µÄÔ´´úÂëºÍÆäËüÉñÃØÐÅÏ¢ ¡£ÕâЩ°ü¾ùÓÉͳһ¸önpmÓû§malikrukd4732Ðû²¼ £¬²¢°üÀ¨Èý¸öÎļþ ¡£ÕâÐ©Ä £¿éÆô¶¯JavaScript£¨¡°index.js¡±£© £¬ÆäÖаüÀ¨½«ÐÅϢй¶µ½Ô¶³Ì·þÎñÆ÷µÄ´úÂë ¡£¶ñÒâ´úÂëÕë¶ÔµÄÎļþºÍĿ¼¿ÉÄܰüÀ¨Ãô¸ÐÊý¾Ý £¬ÀýÈçÖÚ¶àÓ¦ÓúͷþÎñµÄƾ֤ ¡£Ñо¿Ö°Ô±ÍƲâÕâÊÇÒ»ÆðÖ÷ÒªÕë¶Ô¼ÓÃÜÇ®±ÒÁìÓòµÄ¹¥»÷Ô˶¯ ¡£


https://securityaffairs.com/149165/hacking/npm-highly-targeted-attacks.html


5¡¢TrustwaveÅû¶Chrome¶ñÒâÈí¼þRilideµÄ¶àÆð¹¥»÷Ô˶¯


8ÔÂ3ÈÕ £¬TrustwaveÅû¶ÁËRilideбäÌåµÄ¶àÆð¹¥»÷Ô˶¯ ¡£RilideÕë¶Ô»ùÓÚChromiumµÄä¯ÀÀÆ÷ £¬Ö¼ÔÚÇÔÈ¡Ãô¸ÐÊý¾ÝºÍ¼ÓÃÜÇ®±Ò £¬Ð°汾¿ÉÈÆ¹ýGoogleµÄChrome Extension Manifest V3 ¡£½üÆÚ·¢Ã÷µÄµÚÒ»¸öÔ˶¯Ê¹ÓÃPowerPointÓÕ¶üºÍαÔìµÄPalo Alto GlobalProtect²å¼þÀ´Õë¶ÔÆóÒµÓû§ ¡£µÚ¶þ¸öÔ˶¯Ê¹ÓÃTwitterÐû´«Î±ÔìµÄP2EÓÎÏ· £¬×îÖÕ»á·Ö·¢RilideºÍRedline Stealer ¡£µÚÈý¸öÔ˶¯Ö÷ÒªÕë¶Ô°Ä´óÀûÑǺÍÓ¢¹úÄ¿µÄµÄÒøÐÐÊý¾Ý £¬½ÓÄÉÆæÒìµÄÒªÁì¼ÓÔØÀ©Õ¹³ÌÐò ¡£


https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/new-rilide-stealer-version-targets-banking-data-and-works-around-google-chrome-manifest-v3/


6¡¢BlackBerryÐû²¼2023ÄêQ2ÍþÐ²Ì¬ÊÆµÄÆÊÎö±¨¸æ


8ÔÂ3ÈÕ±¨µÀ £¬BlackBerryÐû²¼ÁË2023ÄêQ2ÍþÐ²Ì¬ÊÆµÄÆÊÎö±¨¸æ ¡£±¨¸æº­¸ÇÁË3ÔÂÖÁ5ÔÂÊӲ쵽µÄ¹¥»÷ £¬¸Ã¹«Ë¾Éù³ÆÔÚ´Ëʱ´úÄÚ×èÖ¹ÁË150Íò´Î¹¥»÷ £¬ÆäÖÐ55000´Î¹¥»÷Õë¶Ô¹«¹²ÐÐÒµ ¡£¹¥»÷Õ߯½¾ùÿ·ÖÖÓÖ´ÐÐÔ¼11.5´Î¹¥»÷ £¬Ã¿·ÖÖÓÔ¼1.7¸öеĶñÒâÈí¼þÑù±¾ ¡£Ò½ÁƱ£½¡ºÍ½ðÈÚ·þÎñÐÐÒµÊÇÊܵ½¹¥»÷×î¶àµÄÐÐÒµÖ®Ò» ¡£±ðµÄ £¬APT28ºÍLazarus Group·Ç³£»îÔ¾ £¬ËûÃÇ֮ǰµÄ¹¥»÷Ö÷ÒªÕë¶ÔÃÀ¹ú¡¢Å·Ö޺ͺ«¹ú ¡£


https://www.blackberry.com/us/en/solutions/threat-intelligence/2023/threat-intelligence-report-august