曹县黑客今年窃取了价值 13 亿美元的加密货币

今日安全资讯速递

曹县LazarusAPT组织被发现利用 CookiePlus 恶意软件攻击核工程师

https://thehackernews.com/2024/12/lazarus-group-spotted-targeting-nuclear.html

曹县黑客今年窃取了价值 13 亿美元的加密货币

https://www.bleepingcomputer.com/news/security/north-korean-hackers-stole-13-billion-worth-of-crypto-this-year/

与俄罗斯有关的 UAC-0125 滥用 Cloudflare Workers 攻击乌克兰军队

https://securityaffairs.com/172139/apt/cert-ua-warns-russia-uac-0125-abuses-cloudflare-workers.html

CAS（网络无政府主义小队）针对俄罗斯和白俄罗斯组织的攻击分析

https://securelist.com/cyber-anarchy-squad-attacks-with-uncommon-trojans/114990/

黑客利用 Microsoft MSC 文件在巴基斯坦攻击中部署混淆后门

https://thehackernews.com/2024/12/hackers-use-microsoft-msc-files-to.html

Wiz 发现一个针对 Linux 环境的新型恶意软件活动，该活动由 Diicot 威胁组织发起

https://www.wiz.io/blog/diicot-threat-group-malware-campaign

Mask APT 组织沉寂 10 年后卷土重来

https://securityaffairs.com/172093/apt/the-mask-apt-is-back.html

俄罗斯黑客利用 RDP 代理在 MiTM 攻击中窃取数据

https://www.bleepingcomputer.com/news/security/russian-hackers-use-rdp-proxies-to-steal-data-in-mitm-attacks/

使用被盗 NPM 令牌发布的恶意 Rspack、Vant 软件包

https://www.bleepingcomputer.com/news/security/malicious-rspack-vant-packages-published-using-stolen-npm-tokens/

针对 Microsoft 365 的新型网络钓鱼即服务平台“FlowerStorm”在犯罪分子中流行

https://www.bleepingcomputer.com/news/security/new-flowerstorm-microsoft-phishing-service-fills-void-left-by-rockstar2fa/

卡巴斯基披露黑客利用关键的 Fortinet EMS 漏洞部署远程访问工具

https://thehackernews.com/2024/12/hackers-exploiting-critical-fortinet.html

供应链攻击中 Rspack npm 软件包遭加密挖矿恶意软件攻击

https://thehackernews.com/2024/12/rspack-npm-packages-compromised-with.html

FBI 对 HiatusRAT 恶意软件发出警报

https://www.aha.org/news/headline/2024-12-19-fbi-issues-alert-hiatusrat-malware

Juniper 称，使用默认密码的路由器容易受到 Mirai 感染

https://therecord.media/routers-with-default-passwords-mirai-malware-juniper

190,000 台受 BadBox 感染的 Android 设备组成僵尸网络

https://www.securityweek.com/botnet-of-190000-badbox-infected-android-devices-discovered/

Play 勒索软件组织声称窃取了甜甜圈和咖啡零售连锁店 Krispy Kreme 的敏感数据

https://www.securityweek.com/ransomware-group-claims-theft-of-personal-financial-data-from-krispy-kreme/

针对非营利性医疗系统Ascension的网络攻击泄露 560 万人数据

https://www.cybersecuritydive.com/news/ascension-cyberattack-data-breach/736183/

Builder.ai 数据库配置错误导致 1.29 TB 不安全记录泄露

https://hackread.com/builder-ai-database-misconfiguration-expose-tb-records/

BeyondTrust 客户遭受与泄露 API 密钥相关的攻击，CISA 敦促立即修复被利用的 BeyondTrust 漏洞

https://www.securityweek.com/cisa-urges-immediate-patching-of-exploited-beyondtrust-vulnerability/

研究人员警告称，Apache Struts 2 关键漏洞可能遭利用

https://www.cybersecuritydive.com/news/active-exploitation-apache-struts-2-flaw/736199/

Sophos 发布针对严重防火墙漏洞的修补程序

https://thehackernews.com/2024/12/sophos-fixes-3-critical-firewall-flaws.html

FortiWLM 存在严重缺陷，可能导致管理员访问漏洞

https://thehackernews.com/2024/12/fortinet-warns-of-critical-fortiwlm.html

Rockwell PowerMonitor 漏洞允许远程黑客攻击工业系统

https://www.securityweek.com/rockwell-powermonitor-vulnerabilities-allow-remote-hacking-of-industrial-systems/