1月27日每日安全热点 - 黑客利用MSHTML漏洞监视政府和国防目标

2022-01-27 09:30:51 360安全客安全资讯 6933 4

漏洞 Vulnerability

CVE-2021-4034：Linux Polkit 权限提升漏洞通告

https://cert.360.cn/warning/detail?id=25d7a6ec96c91ca4e4238fd10da2c778

安全事件 Security Incident

Log4j:Mirai僵尸网络被发现针对ZyXEL网络设备

https://www.zdnet.com/article/log4j-mirai-ddos-botnet-targeting-zyxel-networking-devices/

黑客称他们加密了白俄罗斯铁路服务器以示抗议

https://www.bleepingcomputer.com/news/security/hackers-say-they-encrypted-belarusian-railway-servers-in-protest/

Android恶意软件BRATA在窃取数据后会擦拭你的设备

https://www.bleepingcomputer.com/news/security/android-malware-brata-wipes-your-device-after-stealing-data/

攻击者现在积极攻击关键的SonicWall RCE漏洞

https://www.bleepingcomputer.com/news/security/attackers-now-actively-targeting-critical-sonicwall-rce-bug/

加拿大外交部遭到黑客攻击，一些服务被关闭

https://www.bleepingcomputer.com/news/security/canadas-foreign-affairs-ministry-hacked-some-services-down/

黑客使用新的恶意软件打包器DTPacker来避免分析、检测

https://thehackernews.com/2022/01/hackers-using-new-malware-packer.html

一项新的间谍软件活动攻击工业企业窃取企业证书

https://gbhackers.com/a-new-spyware-campaign-targeting-industrial-enterprises/

黑客利用MSHTML漏洞监视政府和国防目标

https://thehackernews.com/2022/01/hackers-exploited-mshtml-flaw-to-spy-on.html

Watching hole在亚洲部署了新的macOS恶意软件DazzleSpy

https://www.welivesecurity.com/2022/01/25/watering-hole-deploys-new-macos-malware-dazzlespy-asia/

针对亚洲的水坑攻击活动部署macOS恶意软件DazzleSpy

https://www.welivesecurity.com/2022/01/25/watering-hole-deploys-new-macos-malware-dazzlespy-asia/

APT28针对政府官员和西亚国防工业的网络间谍活动

https://www.trellix.com/en-gb/about/newsroom/stories/threat-labs/prime-ministers-office-compromised.html

（完）