4月20日每日安全热点 - 黑客论坛出售2.67亿Facebook记录

360安全客 安全资讯 73928 4

安全工具 Security Tools
Flux-Keylogger-具有Web面板的现代Javascript键盘记录器
https://www.kitploit.com/2020/04/flux-keylogger-modern-javascript.html
pypykatz-用纯Python实现的Mimikatz
https://github.com/skelsec/pypykatz
安全资讯 Security Information
黑客在黑客论坛上出售了2.67亿Facebook记录
https://www.hackread.com/hacker-forum-sell-267-million-facebook-records/
流行的Webkinz世界在线儿童游戏遭黑客攻击，2300万用户信息泄露
https://securityaffairs.co/wordpress/101886/data-breach/webkinz-data-breach.html
安全研究 Security Research
打造对抗仿真实验室
https://www.mdsec.co.uk/2020/04/designing-the-adversary-simulation-lab/
CVE-2020-8835: LINUX内核特权通过不适当的EBPF程序验证升级
https://www.thezdi.com/blog/2020/4/8/cve-2020-8835-linux-kernel-privilege-escalation-via-improper-ebpf-program-verification
远控免杀从入门到实践之白名单（113个）总结篇
https://www.freebuf.com/articles/system/232074.html
滥用HTTP路径正常化和缓存中毒窃取Rocket League帐户
https://samcurry.net/abusing-http-path-normalization-and-cache-poisoning-to-steal-rocket-league-accounts/
恶意软件 Malware
勒索软件:双重勒索
https://research.checkpoint.com/2020/ransomware-evolved-double-extortion/
安全报告 Security Report
我多年来发现的Google Maps API 安全漏洞
https://medium.com/bugbountywriteup/google-maps-api-not-the-key-bugs-that-i-found-over-the-years-781840fc82aa
（完）