《维他命》逐日安全简讯20190207

颁布功夫 2019-02-07

【安全缝隙】


钻研团队披露RDP客户端中的多个安全缝隙

https://research.checkpoint.com/reverse-rdp-attack-code-execution-on-rdp-clients/


Zcash高危缝隙，可获取无限多的加密钱币

https://thehackernews.com/2019/02/zcash-cryptocurrency-hack.html


【缝隙补丁】


思科建复ISE中的多个可导致XSS攻击的缝隙

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190109-ise-multi-xss


【威胁谍报】


加密钱币Denarius客户端被植入恶意软件AZORult

https://www.zdnet.com/article/backdoored-cryptocurrency-software-found-serving-azorult-malware/


Outlaw新恶意活动，利用Shellbot木马攻击Linux系统
https://cyware.com/news/the-outlaw-threat-group-uses-shellbot-trojan-to-target-linux-systems-in-cryptomining-attacks-0a0b3349


申明：本资讯由GA黄金甲维他命安全幼组翻译和整顿