ij¿ç¹ú¹«Ë¾Òò50ÒÚ´Î×Ô¶¯²¦ºÅµç»°±»FCC·£¿î½ü3ÒÚÃÀÔª

°ä²¼¹¦·ò 2023-08-08

1¡¢Ä³¿ç¹ú¹«Ë¾Òò50ÒÚ´Î×Ô¶¯²¦ºÅµç»°±»FCC·£¿î½ü3ÒÚÃÀÔª


¾ÝýÌå8ÔÂ4ÈÕ±¨Â·£¬ÃÀ¹úFCC¶ÔÒ»¼Ò¿ç¹úÍøÂ繫˾·£¿î299997000ÃÀÔª£¬Ô­ÒòÊǸù«Ë¾ÔÚ2021ÄêÈý¸öÔÂÄÚÏò³¬¹ý5ÒÚ¸öµç»°ºÅÂ벦´òÁË50ÒÚ´Î×Ô¶¯²¦ºÅµç»° ¡£FCC³Æ£¬¸Ã¹«Ë¾Î¥·´Á˶àÏî×Ô¶¯É§Èŵ绰½ûÁÔ̺¬Î´¾­ÊÂÏÈÃ÷È·Ô޳ɾÍÏòÊÖ»ú²¦´òÔ¤ÏȼÔìµÄÓïÒôµç»°¡¢Î´¾­ÊéÃæÔ޳ɲ¦´òµç»°ÓªÏúµç»°¡¢²¦´ò¹ú¶È²»Èݺô½ÐµÇ¼Ç²áÉϵĺÅÂëÒÔ¼°Î´ÄÜÔÚÆðͷʱ¼ø±ðÀ´µçÕßµÄÉí·ÝµÈ ¡£´Ë±í£¬ÕâЩµç»°ÓªÏúʹÓÃÀ´µçÏÔʾºýŪ¹¤¾ßÀ´¸²¸ÇÆäÏÖʵÆðÔ´£¬ÕâҲΥ·´ÁË˾·¨ ¡£ÈôÊÇÊÜÔì²ÃʵÌåδÄÜÊµÊ±ÍÆ¹ã¸¶¿îʹÃü£¬ÃÀ¹ú˾·¨²¿½«È¾Ö¸ ¡£


https://www.bleepingcomputer.com/news/security/extended-warranty-robocallers-fined-300-million-after-5-billion-scam-calls/


2¡¢ÃÀ¹úÏÄÍþÒÄË«×Ó×ù±±ÌìÎĄ̈Ôâµ½¹¥»÷µ¼ÖÂÔËÓªÁÙʱÖжÏ


ýÌå8ÔÂ3ÈÕ±¨Â·³Æ£¬ÃÀ¹ú¹ú¶ÈÌìÎÄѧÖÐÐÄÔâµ½¹¥»÷£¬µ¼ÖÂÏÄÍþÒÄÒ»¸öÌìÎĄ̈µÄÔËÓªÊܵ½Ó°Ïì ¡£ÃÀ¹ú¹ú¶È¿ÆÑ§»ù½ð»áµÄ¹ú¶È¹âѧºì±íÌìÎÄѧ×êÑг¢ÊÔÊÒ£¨NOIRLab£©³ÆÆä·¢ÏÖ¹¥»÷ºóµ±¼´²ÉÈ¡´ëÊ©£¬²¢³öÓÚÉóÉ÷˼¿¼¹Ø¹ØÁËË«×Ó×ùÌìÎÄÌ¨ÍÆËã»úϵͳ ¡£Ä¿Ç°£¬Ë«×Ó×ùÍøÕ¾ºÍÌá°¸¹¤¾ßÒÑÀëÏߣ¬µ«NOIRLabÍøÕ¾ÈÔά³ÖÔÚÏß״̬ ¡£¸Ã³¢ÊÔÊÒûÓÐй©ÕâÊÇ·ñÊÇÀÕË÷¹¥»÷£¬µ«°µÊ¾Õâ¶ÔNOIRLabÖÐÐĵįäËü»ù´¡ÉèʩûÓÐÓ°Ïì ¡£


https://therecord.media/gemini-north-observatory-cyberattack


3¡¢Î÷°àÑÀµÄÖÁÉÙ72¸öÍøÕ¾Ôâµ½NoName057µÄDDoS¹¥»÷


¾Ý8ÔÂ7ÈÕ±¨Â·£¬Î÷°àÑÀÖÁÉÙ72¸öÍøÕ¾Ôâµ½¶íÂÞ˹ºÚ¿ÍÍÅ»ïNoName057µÄDDoS¹¥»÷ ¡£¹¥»÷²úÉúÔÚ7ÔÂ19ÈÕÖÁ30ÈÕÖ®¼ä£¬Ó°ÏìÁËÒøÐÓ×¢µçÐÅÌṩÉÌ¡¢Ã½ÌåºÍÓÎÀÀ¹«Ë¾ ¡£±»¹¥»÷ÍøÕ¾»¹Ô̺¬×ÜÀí¹ÙÛ¡La Moncloa¡¢·¨Ôº¡¢Ë¾·¨²¿¡¢ºÓɽÕþ²ß²¿ÒÔ¼°¹ú·À²¿»ú¹¹Isdefe ¡£¾ÝϤ£¬Õâ´Î¹¥»÷²¢Î´µ¼ÖÂÈκÎÃô¸ÐÊý¾Ýй¶ ¡£NoName057»¹Ôø²Î¼ÓÁËÓ벨À¼¡¢Á¢ÌÕÍðÒÔ¼°½Ý¿Ë¹²ºÍ¹ú×ÜͳºòÑ¡ÈËÓйصĹ¥»÷ ¡£


https://www.infosecurity-magazine.com/news/russian-hacktivists-overwhelm/


4¡¢PhylumÔÚNPMÖмì²âµ½¶à¸öÇÔÈ¡¿ª·¢ÈËÔ±Êý¾ÝµÄ¶ñÒâ°ü


8ÔÂ4ÈÕ±¨Â·³Æ£¬PhylumÔÚnpm°üÖÎÀíÆ÷Éϼì²âµ½Á˶à¸ö·ÖÆçµÄ¡°test¡±°ü£¬Ö¼ÔÚй¶¿ª·¢ÈËÔ±µÄÔ´´úÂëºÍÆäËü»úÃÜÐÅÏ¢ ¡£ÕâЩ°ü¾ùÓÉͳһ¸önpmÓû§malikrukd4732°ä²¼£¬²¢Ô̺¬Èý¸öÎļþ ¡£ÕâЩÄ£¿éÆô¶¯JavaScript£¨¡°index.js¡±£©£¬ÆäÖÐÔ̺¬½«ÐÅϢй¶µ½Ô¶³Ì·þÎñÆ÷µÄ´úÂë ¡£¶ñÒâ´úÂëÕë¶ÔµÄÎļþºÍĿ¼¿ÉÄÜÔ̺¬Ãô¸ÐÊý¾Ý£¬ÀýÈç¶à¶àÀûÓúͷþÎñµÄÍ´´¦ ¡£×êÑÐÈËÔ±´§Ä¦ÕâÊÇÒ»Â·ÖØÒªÕë¶Ô¼ÓÃÜÇ®±ÒÁìÓòµÄ¹¥»÷»î¶¯ ¡£


https://securityaffairs.com/149165/hacking/npm-highly-targeted-attacks.html


5¡¢TrustwaveÅû¶Chrome¶ñÒâÈí¼þRilideµÄ¶àÆð¹¥»÷»î¶¯


8ÔÂ3ÈÕ£¬TrustwaveÅû¶ÁËRilideбäÌåµÄ¶àÆð¹¥»÷»î¶¯ ¡£RilideÕë¶Ô»ùÓÚChromiumµÄä¯ÀÀÆ÷£¬Ö¼ÔÚÇÔÈ¡Ãô¸ÐÊý¾ÝºÍ¼ÓÃÜÇ®±Ò£¬Ð°汾¿ÉÈÆ¹ýGoogleµÄChrome Extension Manifest V3 ¡£½üÆÚ·¢ÏֵĵÚÒ»¸ö»î¶¯Ê¹ÓÃPowerPointµö¶üºÍαÔìµÄPalo Alto GlobalProtect²å¼þÀ´Õë¶ÔÆóÒµÓû§ ¡£µÚ¶þ¸ö»î¶¯Ê¹ÓÃTwitterÐû´«Î±ÔìµÄP2EÓÎÏ·£¬×îÖÕ»á·Ö·¢RilideºÍRedline Stealer ¡£µÚÈý¸ö»î¶¯ÖØÒªÕë¶Ô°Ä´óÀûÑǺÍÓ¢¹úÖ¸±êµÄÒøÐÐÊý¾Ý£¬Ñ¡È¡¹ÖÒìµÄ²½Öè¼ÓÔØÀ©´ó·¨Ê½ ¡£


https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/new-rilide-stealer-version-targets-banking-data-and-works-around-google-chrome-manifest-v3/


6¡¢BlackBerry°ä²¼2023ÄêQ2ÍþÐ²Ì¬ÊÆµÄ·ÖÎö»ã±¨


8ÔÂ3ÈÕ±¨Â·£¬BlackBerry°ä²¼ÁË2023ÄêQ2ÍþÐ²Ì¬ÊÆµÄ·ÖÎö»ã±¨ ¡£»ã±¨º­¸ÇÁË3ÔÂÖÁ5Ô¹۲쵽µÄ¹¥»÷£¬¸Ã¹«Ë¾Ðû³ÆÔÚ´ËÆÚ¼äÄÚ×èÖ¹ÁË150Íò´Î¹¥»÷£¬ÆäÖÐ55000´Î¹¥»÷Õë¶Ô¹«¹²ÐÐÒµ ¡£¹¥»÷Õß¾ùÔÈÿ·ÖÖÓÖ´ÐÐÔ¼11.5´Î¹¥»÷£¬Ã¿·ÖÖÓÔ¼1.7¸öеĶñÒâÈí¼þÑù±¾ ¡£Ò½ÁƱ£½¡ºÍ½ðÈÚ·þÎñÐÐÒµÊÇÊܵ½¹¥»÷×î¶àµÄÐÐÒµÖ®Ò» ¡£´Ë±í£¬APT28ºÍLazarus Group·Ç³£»îÔ¾£¬ËûÃÇ֮ǰµÄ¹¥»÷ÖØÒªÕë¶ÔÃÀ¹ú¡¢Å·Ö޺ͺ«¹ú ¡£


https://www.blackberry.com/us/en/solutions/threat-intelligence/2023/threat-intelligence-report-august