以色列黑客组织 WeRedEvils 宣称其摧毁了伊朗互联网

今日安全资讯速递

俄黑客组织 APT28 利用汽车销售钓鱼邮件攻击外交官

https://thehackernews.com/2024/08/apt28-targets-diplomats-with-headlace.html

与朝鲜有关的恶意软件瞄准 Windows、Linux 和 macOS 开发人员

https://thehackernews.com/2024/07/north-korea-linked-malware-targets.html

黑客利用 LODEINFO 和 NOOPDOOR 恶意软件攻击日本公司

https://thehackernews.com/2024/07/chinese-hackers-target-japanese-firms.html

网络间谍组织 XDSpy 瞄准俄罗斯和摩尔多瓦的公司

https://thehackernews.com/2024/07/cyber-espionage-group-xdspy-targets.html

网络犯罪分子利用 Agent Tesla 和 Formbook 恶意软件攻击波兰企业

https://thehackernews.com/2024/07/cybercriminals-target-polish-businesses.html

印度 SideWinder （响尾蛇）APT组织攻击地中海港口和海事设施

https://www.securityweek.com/indian-apt-targeting-mediterranean-ports-and-maritime-facilities/

亲乌克兰黑客声称对俄罗斯电视广播进行攻击

https://therecord.media/pro-ukraine-hackers-claim-hack-on-russian-tv-broadcasts

Mandiant 报告：朝鲜黑客组织 APT45 瞄准武器设计、核设施，并针对医疗机构进行勒索软件攻击

https://www.securityweek.com/mandiant-shines-spotlight-on-apt45-behind-north-koreas-digital-military-machine/

一名朝鲜黑客因对美国医院发动勒索软件攻击被指控

https://www.securityweek.com/north-korean-charged-in-ransomware-attacks-on-american-hospitals/

与白俄罗斯有关的黑客利用 PicassoLoader 恶意软件攻击乌克兰组织

https://therecord.media/belarus-ukraine-picasso-malware-ghostwriter

13 个配置错误的数据库泄露数百万美国选民数据

https://hackread.com/millions-us-voter-data-exposed-misconfigured-databases/

攻击者滥用 CloudflareTryCloudflare 功能创建一次性隧道，以分发远程访问木马

https://www.securityweek.com/cloudflare-tunnels-abused-for-malware-delivery/

Mirai 僵尸网络瞄准易受目录遍历攻击的 OFBiz 服务器

https://thehackernews.com/2024/08/mirai-botnet-targeting-ofbiz-servers.html

黑客通过流行的开发者问答平台分发恶意 Python 软件包

https://thehackernews.com/2024/08/hackers-distributing-malicious-python.html

Facebook 上的虚假 AI 编辑器广告推送窃取密码的恶意软件

https://www.bleepingcomputer.com/news/security/fake-ai-editor-ads-on-facebook-push-password-stealing-malware/

假冒 Google Authenticator 应用正在传播恶意软件

https://www.timesnownews.com/technology-science/alert-fake-google-authenticator-app-distributing-malware-spotted-check-details-article-112213972

DNS 提供商未能正确验证域名所有权，攻击者在五年内劫持了超过 35,000 个域名

https://www.securityweek.com/over-35k-domains-hijacked-in-sitting-ducks-attacks/

BlankBot Android 木马窃取用户数据、执行 C＆C 命令并支持自定义注入、键盘记录和屏幕录制

https://www.securityweek.com/new-blankbot-android-trojan-can-steal-user-data/

Deepfake 制作工具在暗网市场激增

https://www.msn.com/en-us/news/technology/deepfake-creation-tools-proliferate-on-darknet-markets/ar-BB1lAqbi

新的 Panamorfi DDoS 攻击利用了错误配置的 Jupyter Notebook

https://hackread.com/panamorfi-ddos-attack-misconfigured-jupyter-notebooks/

勒索软件组织声称对俄亥俄州哥伦布攻击事件负责，并出售 6TB 数据

https://www.nbc4i.com/news/local-news/columbus/ransomware-group-claims-columbus-attack-selling-6-terabytes-of-passwords-and-more/

勒索软件攻击导致印度 300 家银行支付系统瘫痪

https://www.indiatoday.in/world/story/indian-banks-ransomware-attacks-payment-systems-disrupted-upi-atm-service-provider-2574793-2024-08-01

五名中国人因“大规模”老年人诈骗案被美国联邦政府逮捕

https://therecord.media/elder-fraud-arrests-doj-five-chinese-nationals

新的 Windows 后门 BITSLOTH 利用 BITS 进行隐秘通信

https://thehackernews.com/2024/08/new-windows-backdoor-bitsloth-exploits.html

超过 20,000 个暴露在互联网的 VMware ESXi 实例易受 CVE-2024-37085 攻击

https://securityaffairs.com/166432/hacking/vmware-esxi-cve-2024-37085-vulnerable-instances.html

罗克韦尔自动化 Logix 控制器中发现安全绕过漏洞

https://www.securityweek.com/security-bypass-vulnerability-found-in-rockwell-automation-logix-controllers/

CISA 警告 Avtech 摄像头漏洞遭野外利用

https://www.securityweek.com/cisa-warns-of-avtech-camera-vulnerability-exploited-in-wild/

尽管已有补丁，但数千台 Ubiquiti 摄像头和路由器仍存在漏洞

https://cybernews.com/security/thousands-ubiquiti-cameras-and-routers-vulnerable/