1月21日每日安全热点 - 新的白兔勒索软件与FIN8黑客集团有关

360安全客 安全资讯 31165 4

漏洞 Vulnerability
CVE-2022-23302：Apache log4j JMSSink反序列化代码执行漏洞
https://nvd.nist.gov/vuln/detail/CVE-2022-23302
CVE-2022-23305：Apache log4j JDBCAppender SQL注入漏洞
https://nvd.nist.gov/vuln/detail/CVE-2022-23305
CVE-2022-23307：Apache log4j Chainsaw反序列化代码执行漏洞
https://nvd.nist.gov/vuln/detail/CVE-2022-23307
安全事件 Security Incident
AlphV/BlackCat勒索软件团伙公布了从时装巨头蒙克莱尔（Moncler）处窃取的数据
https://securityaffairs.co/wordpress/126880/cyber-crime/alphv-blackcat-ransomware-hit-moncler.html
以财务为动机的Earth Lusca威胁行为者以全球组织为目标
https://securityaffairs.co/wordpress/126868/hacking/earth-lusca-campaigns.html
Doxbin泄漏包括犯罪分子的数据，可能会助长黑客攻击
https://www.databreachtoday.com/doxbin-leak-includes-criminals-data-could-boost-hacking-a-18326
新的白兔勒索软件与FIN8黑客集团有关
https://www.bleepingcomputer.com/news/security/new-white-rabbit-ransomware-linked-to-fin8-hacking-group/
Office 365网络钓鱼攻击冒充美国劳工部
https://www.bleepingcomputer.com/news/security/office-365-phishing-attack-impersonates-the-us-department-of-labor/
WhisperGate的恶意引导加载程序的技术分析
https://www.crowdstrike.com/blog/technical-analysis-of-whispergate-malware/
海莲花组织在野恶意文件加密解密深度剖析
https://mp.weixin.qq.com/s/IwDRYmP3RSXskoG9WFSsBw
分析TA428在LagTime IT行动中部署的工具
https://medium.com/@0xthreatintel/internals-of-ta428-operation-lagtime-it-3fd342404360
（完）