俄罗斯逮捕与 Hive 和 LockBit 勒索软件有关的黑客

今日安全资讯速递

APT-C-60 黑客在 SpyGlace 恶意软件活动中利用 StatCounter 和 Bitbucket

https://thehackernews.com/2024/11/apt-c-60-exploits-wps-office.html

俄罗斯网络间谍入侵目标街对面的大楼，实施 Wi-Fi 攻击

https://www.securityweek.com/russian-cyberspies-hacked-building-across-street-from-target-for-wi-fi-attack/

俄罗斯黑客组织Romcom利用0day漏洞攻击 Firefox、Tor 用户

https://www.pcmag.com/news/russian-hackers-used-zero-day-attack-to-hit-firefox-tor-users

与俄罗斯有关的 APT TAG-110 的目标是欧洲和亚洲

https://securityaffairs.com/171343/apt/tag-110-targets-asia-europe.html

Gelsemium黑客组织利用新型间谍恶意软件攻击 Linux 系统

https://therecord.media/china-hackers-linux-malware-target

人工智能驱动的虚假新闻活动针对西方对乌克兰的支持

https://thehackernews.com/2024/11/ai-powered-fake-news-campaign-targets.html

黑客从乌干达中央银行窃取了数百万美元

https://securityaffairs.com/171562/security/financially-motivated-threat-actors-hacked-ugandas-central-bank.html

新型网络钓鱼活动利用损坏的 Word 文档来逃避安全保护

https://www.bleepingcomputer.com/news/security/novel-phising-campaign-uses-corrupted-word-documents-to-evade-security/

10 亿个 URL 用户密码组合泄露：安全风险不断升级

https://dailydarkweb.net/1-billion-url-user-pass-combo-leak-security-risks-escalate/

Google Play 上的 SpyLoan Android 恶意软件已安装 800 万次

https://www.bleepingcomputer.com/news/security/spyloan-android-malware-on-google-play-installed-8-million-times/

Spotify 被滥用于诈骗和恶意软件传播

https://dig.watch/updates/spotify-misused-for-scams-and-malware

俄罗斯逮捕与 Hive 和 LockBit 勒索软件有关的黑客

https://thehackernews.com/2024/11/wanted-russian-cybercriminal-linked-to.html

ESET 披露针对 Linux 的原型 UEFI Bootkit

https://www.securityweek.com/eset-flags-prototype-uefi-bootkit-targeting-linux/

每月 3,000 美元的 macOS 恶意软件“Banshee Stealer”源代码泄露

https://www.securityweek.com/source-code-of-3000-a-month-macos-malware-banshee-stealer-leaked/

欧洲刑警组织关闭非法 IPTV 流媒体网络 逮捕 11 人

https://therecord.media/11-arrested-europol-streaming-shutdown

恶意 PyPI 软件包将加密钱包暴露给信息窃取后门

https://www.infosecurity-magazine.com/news/malicious-pypi-exposes-crypto/

Helldown 勒索软件攻击 Zyxel 防火墙：CVE-2024-11667 遭利用

https://thecyberexpress.com/helldown-ransomware-targets-zyxel-firewalls/

网络钓鱼即服务“Rockstar 2FA”利用 AiTM 攻击瞄准 Microsoft 365 用户

https://thehackernews.com/2024/11/phishing-as-service-rockstar-2fa.html

微软修复 AI、云和 ERP 安全漏洞；其中一个漏洞被利用于主动攻击

https://thehackernews.com/2024/11/microsoft-fixes-ai-cloud-and-erp.html

Windows Server 2012 新零日漏洞获得免费非官方补丁

https://www.bleepingcomputer.com/news/security/new-windows-server-2012-zero-day-gets-free-unofficial-patches/

Palo Alto Networks 和 SonicWall VPN 受到允许远程代码执行和权限提升漏洞影响

https://www.securityweek.com/new-vpn-attack-demonstrated-against-palo-alto-networks-sonicwall-products/

ProjectSend 漏洞被广泛利用

https://www.securityweek.com/projectsend-vulnerability-exploited-in-the-wild/

施耐德电气、mySCADA 和 Automated Logic 产品中发现严重 ICS 漏洞

https://thecyberexpress.com/ics-vulnerabilities-reported-this-week/