该攻击链采用独特的多层级阶段来传播类似 Agent Tesla 变种、Remcos RAT 或 XLoader 的恶意软件。攻击者越来越依赖这种复杂的传播机制来逃避检测、绕过传统沙盒,并确保成功传播和...
疑似 APT37 新攻击武器Fakecheck分析报告
——知道创宇404高级威胁情报团队 K&XWS01概述APT37疑似为半岛国家资助的攻击组织,也称为ScarCruft、Reaper、RedEye、Ricochet Chollima。该组织自...
朝鲜的Kimsuky瞄准韩国研究机构进行后门攻击
The North Korean threat actor known as Kimsuky has been observed targeting research institutes in So...