1月28日每日安全热点 - 药物检测实验室门户事件暴露了4年的数据

360安全客 安全资讯 158669 4

漏洞 Vulnerability
CVE-2021-33707：SAP NetWeaver Knowledge Management远程攻击漏洞
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33707
安全事件 Security Incident
Segway商店遭黑客攻击，盗取顾客的信用卡
https://www.bleepingcomputer.com/news/security/segway-store-hacked-to-steal-customers-credit-cards/
Trellix发现OneDrive针对西亚政府官员的恶意软件
https://www.zdnet.com/article/trellix-finds-onedrive-malware-campaign-targeting-govt-officials-in-western-asia/
Tiany恶意间谍软件使用伪装成来自电信公司的消息的诽谤
https://www.trendmicro.com/en_us/research/22/a/tianyspy-malware-uses-smishing-disguised-as-message-from-telco.html
微软警告说：一起网络钓鱼攻击活动旨在阅读你的电子邮件
https://www.zdnet.com/article/microsoft-warns-about-this-phishing-attack-that-wants-to-read-your-emails/
TrickBot现在使研究人员的浏览器崩溃以阻止恶意软件分析
https://www.bleepingcomputer.com/news/security/trickbot-now-crashes-researchers-browsers-to-block-malware-analysis/
药物检测实验室门户事件暴露了4年的数据
https://www.databreachtoday.com/drug-testing-lab-portal-incident-exposed-data-for-4-years-a-18375
新的 DeadBolt 勒索软件以 QNAP 设备为目标，要求 50 BTC 获取主密钥
https://www.bleepingcomputer.com/news/security/new-deadbolt-ransomware-targets-qnap-devices-asks-50-btc-for-master-key/
诺贝尔基金会网站在获奖当天遭DDoS攻击
https://www.bleepingcomputer.com/news/security/nobel-foundation-site-hit-by-ddos-attack-on-award-day/
KONNI演化成更隐身的RAT
https://blog.malwarebytes.com/threat-intelligence/2022/01/konni-evolves-into-stealthier-rat/
分析与Molerats组织有关的管理IP地址
https://team-cymru.com/blog/2022/01/26/analysis-of-a-management-ip-address-linked-to-molerats-apt/
APT27使用恶意软件变种HYPERBRO攻击德国企业
https://www.verfassungsschutz.de/SharedDocs/kurzmeldungen/DE/2022/2022-01-26-cyberbrief.html
分析WhisperGate恶意软件
https://www.netskope.com/blog/netskope-threat-coverage-whispergate
（完）