12月19日每日安全热点 - Credential Stealer瞄准美国、加拿大银行客户

360安全客 安全资讯 23592 4

安全报告 Security Report
2020安全漏洞年报
https://www.anquanke.com/post/id/225886
安全工具 Security Tools
BurpFastJsonScan
https://github.com/pmiaowu/BurpFastJsonScan
Scilla-信息收集工具
https://www.kitploit.com/2020/12/scilla-information-gathering-tool.html
恶意软件 Malware
Credential Stealer瞄准美国、加拿大银行客户
https://www.trendmicro.com/en_us/research/20/l/stealth-credential-stealer-targets-us-canadian-bank-customers.html
安全事件 Security Incident
FBI警告DoppelPaymer勒索软件攻击激增
https://www.databreachtoday.com/fbi-warns-doppelpaymer-ransomware-attack-surge-a-15630
黑客攻击COVID-19疫苗供应链并在暗网中出售疫苗
https://securityaffairs.co/wordpress/112433/hacking/covid-19-attacks-2.html
安全研究 Security Research
梦中初探域渗透流程
https://xz.aliyun.com/t/8656
Valve游戏中的漏洞
https://research.checkpoint.com/2020/game-on-finding-vulnerabilities-in-valves-steam-sockets/
CVE-2020-27897：APPLE MACOS内核OOB权限提升漏洞
https://www.thezdi.com/blog/2020/12/9/cve-2020-27897-apple-macos-kernel-oob-write-privilege-escalation-vulnerability
SolarWinds SUNBURST后门分析
https://labs.sentinelone.com/solarwinds-sunburst-backdoor-inside-the-stealthy-apt-campaign/
（完）