6月27日每日安全热点 - 欧洲银行遭史上最大基于PPS的DDoS攻击

360安全客 安全资讯 72275 4

安全工具 Security Tools
CorsMe – CORS错误配置扫描器
https://www.kitploit.com/2020/06/corsme-cross-origin-resource-sharing.html
ShellcodeLoader – 将shellcode用rsa加密并动态编译exe，自带几种反沙箱技术
https://github.com/Hzllaga/ShellcodeLoader
安全资讯 Security Information
欧洲主流银行遭遇史上最大的基于PPS的DDoS攻击
https://www.hackread.com/mainstream-european-bank-largest-ever-pps-ddos-attack/
非接触式支付的安全风险
https://securityintelligence.com/articles/the-security-risks-of-contactless-payment/
安全研究 Security Research
DarkCrewBot – 机器人商店船员的归来
https://research.checkpoint.com/2020/the-return-of-the-bot-shop-crew/
GuLoader？ 不，CloudEyE。
https://research.checkpoint.com/2020/guloader-cloudeye/
zdi20 -709: NETGEAR NIGHTHAWK R6700路由器中的堆溢出
https://www.thezdi.com/blog/2020/6/24/zdi-20-709-heap-overflow-in-the-netgear-nighthawk-r6700-router
使用yarGen提取Linux恶意脚本特征
https://www.freebuf.com/sectool/238293.html
恶意软件 Malware
Himera与AbSent-Loader利用COVID-19传播恶意软件
https://yoroi.company/research/himera-and-absent-loader-leverage-covid19-themes/
安全报告 Security Report
威胁评估:EKANS勒索软件
https://unit42.paloaltonetworks.com/threat-assessment-ekans-ransomware/
（完）